Tool
UltraVNC Viewer
- First Reported
- Aug 2, 2026
- Latest Reported
- Aug 2, 2026
Reported Context (1)
- Once UltraVNC Server is installed on the infected system, it opens ports such as 5800 and 5900 depending on the configuration, allowing the threat actor to achieve remote control of the screen through UltraVNC Viewer. Larva-24009 Uses Phishing to Deploy PowerShell Backdoors and Steal Data
Malware (2)
Threat Actors (1)
MITRE ATT&CK (13)
Vendors (1)
Products (4)
Tools (5)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.