SLIGHTPULSE
- ID
- S1110
- Type
- Malware
- Platforms
- Network Devices, Linux
- Source
- attack.mitre.org
- MITRE last modified
- 16 Apr 2025
SLIGHTPULSE is a web shell that was used by APT5 as early as 2020 including against Pulse Secure VPNs at US Defense Industrial Base (DIB) entities.[1]
Techniques used (9)
- T1005 Data from Local System
- T1059 Command and Scripting Interpreter
- T1071.001 Web Protocols
- T1074.001 Local Data Staging
- T1105 Ingress Tool Transfer
- T1132.001 Standard Encoding
- T1140 Deobfuscate/Decode Files or Information
- T1505.003 Web Shell
- T1573.001 Symmetric Cryptography