S0632 GrimAgent

malwareEnterprise

platformsWindows

also known asGrimAgent

GrimAgent is a backdoor that has been used before the deployment of Ryuk ransomware since at least 2020; it is likely used by FIN6 and Wizard Spider.

01

techniques used (25)

ATT&CK techniques this enables or maps to.

02

used by groups (2)

Threat groups associated with this.

03

source

Where this definition is published.

view on ATT&CK
scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan