MITRE ATT&CK / Software / S0519

SYNful Knock

ID
S0519
Type
Malware
Platforms
Network Devices
Source
attack.mitre.org
MITRE last modified
16 Apr 2025

SYNful Knock is a stealthy modification of the operating system of network devices that can be used to maintain persistence within a victim's network and provide new capabilities to the adversary.[1][2]

Techniques used (3)

References

  1. Mandiant - Synful Knock
  2. Cisco Synful Knock Evolution