S1115 WIREFIRE

malwareEnterprise

platformsNetwork Devices

also known asWIREFIRE · GIFTEDVISITOR

WIREFIRE is a web shell written in Python that exists as trojanized logic to the visits.py component of Ivanti Connect Secure VPN appliances. WIREFIRE was used during Cutting Edge for downloading files and command execution.

techniques used (7)

ATT&CK techniques this enables or maps to.

T1071.001Web Protocols
T1105Ingress Tool Transfer
T1132.001Standard Encoding
T1140Deobfuscate/Decode Files or Information
T1505.003Web Shell
T1554Compromise Host Software Binary
T1573.001Symmetric Cryptography

used by campaigns (1)

Campaigns that use this.

C0029Cutting Edge

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan