NGLite
- ID
- S1106
- Type
- Malware
- Platforms
- Windows
- Source
- attack.mitre.org
- MITRE last modified
- 19 Apr 2024
NGLite is a backdoor Trojan that is only capable of running commands received through its C2 channel. While the capabilities are standard for a backdoor, NGLite uses a novel C2 channel that leverages a decentralized network based on the legitimate NKN to communicate between the backdoor and the actors.[1]
Techniques used (5)
- T1016 System Network Configuration Discovery
- T1033 System Owner/User Discovery
- T1071.001 Web Protocols
- T1090.003 Multi-hop Proxy
- T1573.001 Symmetric Cryptography