MITRE ATT&CK / Software / S1108
PULSECHECK ID S1108 Type Malware Platforms Network Devices, Linux Source attack.mitre.org MITRE last modified 16 Apr 2025 PULSECHECK is a web shell written in Perl that was used by APT5 as early as 2020 including against Pulse Secure VPNs at US Defense Industrial Base (DIB) companies.[1]
Techniques used (4) Groups using it (1) References Mandiant Pulse Secure Zero-Day April 2021
Data: MITRE ATT&CK® Enterprise v20.0, from MITRE's official STIX bundle
(mitre-attack/attack-stix-data ),
fetched 15 Oct 2026 (Perth). Descriptions are MITRE's own text.
© 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.
ATT&CK® is a registered trademark of The MITRE Corporation.
MITRE ATT&CK terms of use .
