สำนักงานพัฒนาธุรกรรมทางอิเล็กทรอนิกส์
Electronic Transactions Development Agency

Report

Home > List all groups > List all tools > List all groups using tool BOLDMOVE

Threat Group Cards: A Threat Actor Encyclopedia

Tool: BOLDMOVE

Names	BOLDMOVE
Category	Malware
Type	Backdoor
Description	(Mandiant) With BOLDMOVE, the attackers not only developed an exploit, but malware that shows an in-depth understanding of systems, services, logging, and undocumented proprietary formats. Malware running on an internet-connected device can enable lateral movement further into a network and enable command and control (C2) by tunneling commands in and data out of a network.
Information	<https://www.mandiant.com/resources/blog/chinese-actors-exploit-fortios-flaw>
Malpedia	<https://malpedia.caad.fkie.fraunhofer.de/details/elf.boldmove> <https://malpedia.caad.fkie.fraunhofer.de/details/win.boldmove>

Last change to this tool card: 23 April 2024

Download this tool card in JSON format

Previous: BokBot
Next: BONDUPDATER

All groups using tool BOLDMOVE

Changed	Name	Country	Observed
APT groups
	UNC3886		2021-2023

1 group listed (1 APT, 0 other, 0 unknown)

Digital Service Security Center
Electronic Transactions Development Agency

Follow us on

Report incidents

+66 (0)2-123-1227

[email protected]