FYAnti
- ID
- S0628
- Type
- Malware
- Associated names
- DILLJUICE stage2
- Platforms
- Windows
- Source
- attack.mitre.org
- MITRE last modified
- 25 Apr 2025
FYAnti is a loader that has been used by menuPass since at least 2020, including to deploy QuasarRAT.[1]
Techniques used (4)
- T1027.002 Software Packing
- T1083 File and Directory Discovery
- T1105 Ingress Tool Transfer
- T1140 Deobfuscate/Decode Files or Information