S1246 BeaverTail
malwareEnterpriseplatformsLinux · macOS · Windows
also known asBeaverTail
BeaverTail is a malware that has both a JavaScript and C++ variant. Active since 2022, BeaverTail is capable of stealing logins from browsers and serves as a downloader for second stage payloads. BeaverTail has previously been leveraged by North Korea-affiliated actors identified as DeceptiveDevelopment or Contagious Interview. BeaverTail has been delivered to victims through code repository sites and has been embedded within malicious attachments.
techniques used (23)
ATT&CK techniques this enables or maps to.
used by groups (1)
Threat groups associated with this.
source
Where this definition is published.
Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan