
| Names | LIGHTWIRE | |
| Category | Malware | |
| Type | Backdoor | |
| Description | (Mandiant) LIGHTWIRE is a web shell written in Perl CGI that is embedded into a legitimate Secure Connect file to enable arbitrary command execution. | |
| Information | <https://www.mandiant.com/resources/blog/suspected-apt-targets-ivanti-zero-day> | |
| MITRE ATT&CK | <https://attack.mitre.org/software/S1119> | |
Last change to this tool card: 19 June 2024
Download this tool card in JSON format
Previous: lightSpy
Next: Lilith RAT
| Changed | Name | Country | Observed | ||
APT groups | |||||
| UNC5221, UTA0178 | 2022-Mar 2025 | ||||
1 group listed (1 APT, 0 other, 0 unknown)
|
Digital Service Security Center Follow us on |
Report incidents |
|
| +66 (0)2-123-1227 | ||
| [email protected] | ||