42
42
30
30
UAT-10147 deploys SPECTRE: A cross-platform implant with Linux rootkit and BYOVD capabilities
Cisco Talos identifies UAT-10147 deploying the SPECTRE implant with cross-platform C2, credential theft, and kernel-level EDR bypass.
Cisco Talos reports that the tracked threat actor UAT-10147 is deploying a newly identified implant named SPECTRE. SPECTRE supports cross-platform command-and-control, process injection, credential theft, and anti-analysis protections. It also includes a Linux rootkit and BYOVD (bring your own vulnerable driver) capability enabling kernel-level EDR bypass, marking an evolution in commodity intrusion tooling.
50
42
55
57
60
42
60
42
42
42
60
42
42
60
42
42
57
57
55
30
42
30
55
60
60
60
Nation-State Attackers Exploiting Ivanti CSA Flaws for Network Infiltration
60
47
47
60
60
57
60
30
42
30