S1117 GLASSTOKEN

malwareEnterprise

platformsNetwork Devices

also known asGLASSTOKEN

GLASSTOKEN is a custom web shell used by threat actors during Cutting Edge to execute commands on compromised Ivanti Secure Connect VPNs.

01

techniques used (4)

ATT&CK techniques this enables or maps to.

02

used by campaigns (1)

Campaigns that use this.

03

source

Where this definition is published.

view on ATT&CK
scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan