S0596 ShadowPad
malwareEnterpriseplatformsWindows
also known asShadowPad · POISONPLUG.SHADOW
ShadowPad is a modular backdoor that was first identified in a supply chain compromise of the NetSarang software in mid-July 2017. The malware was originally thought to be exclusively used by APT41, but has since been observed to be used by various Chinese threat activity groups.
01
techniques used (21)
ATT&CK techniques this enables or maps to.
showing 20 of 21
02
used by groups (8)
Threat groups associated with this.
03
used by campaigns (2)
Campaigns that use this.
04
source
Where this definition is published.
scry
Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan