Venom

Reported Context (2)

Venom proxy tool: A proxy tool developed for penetration testers using Go language. The threat actor customized this Venom tool and hardcoded the destination IP address in each activity. Lotus Blossom Uses Sagerunex Backdoor Variants and Cloud Services in Espionage Campaigns
actor establishing C2 using open-source reverse proxy tools such as Fast Reverse Proxy (FRP), sSocks and Venom, a reverse proxy socks5 server-client tool originally developed for penetration testers. Zardoor Backdoor Used in Long-Running Espionage Campaign Against Saudi Nonprofit

Malware (3)

People (4)

Threat Actors (4)

MITRE ATT&CK (28)

Vendors (1)

Products (16)

Tools (18)

Industries (5)

Countries (5)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.