LIGHTWIRE
- ID
- S1119
- Type
- Malware
- Platforms
- Network Devices
- Source
- attack.mitre.org
- MITRE last modified
- 16 Apr 2025
LIGHTWIRE is a web shell written in Perl that was used during Cutting Edge to maintain access and enable command execution by imbedding into the legitimate compcheckresult.cgi component of Ivanti Secure Connect VPNs.[1][2]
Techniques used (5)
- T1071.001 Web Protocols
- T1140 Deobfuscate/Decode Files or Information
- T1505.003 Web Shell
- T1554 Compromise Host Software Binary
- T1573.001 Symmetric Cryptography