S1119 LIGHTWIRE

malwareEnterprise

platformsNetwork Devices

also known asLIGHTWIRE

LIGHTWIRE is a web shell written in Perl that was used during Cutting Edge to maintain access and enable command execution by imbedding into the legitimate compcheckresult.cgi component of Ivanti Secure Connect VPNs.

techniques used (5)

ATT&CK techniques this enables or maps to.

T1071.001Web Protocols
T1140Deobfuscate/Decode Files or Information
T1505.003Web Shell
T1554Compromise Host Software Binary
T1573.001Symmetric Cryptography

used by campaigns (1)

Campaigns that use this.

C0029Cutting Edge

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan