Home > List all groups > List all tools > List all groups using tool THINCRUST

Threat Group Cards: A Threat Actor Encyclopedia

Names	THINCRUST
Category	Malware
Type	Backdoor
Description	(Mandiant) Mandiant’s analysis identified that upon initial connection to the FortiManager, the threat actor appended python backdoor code to a legitimate web framework file. Mandiant classified this new malware family as THINCRUST.
Information	<https://cloud.google.com/blog/topics/threat-intelligence/fortinet-malware-ecosystem/>

Last change to this tool card: 26 August 2024

Download this tool card in JSON format

1 group listed (1 APT, 0 other, 0 unknown)

APT groups