PITSTOP
- ID
- S1123
- Type
- Malware
- Platforms
- Network Devices
- Source
- attack.mitre.org
- MITRE last modified
- 16 Apr 2025
PITSTOP is a backdoor that was deployed on compromised Ivanti Connect Secure VPNs during Cutting Edge to enable command execution and file read/write.[1]
Techniques used (5)
- T1059.004 Unix Shell
- T1140 Deobfuscate/Decode Files or Information
- T1205.002 Socket Filters
- T1559 Inter-Process Communication
- T1573.002 Asymmetric Cryptography