MITRE ATT&CK / Software / S1223
THINCRUST
- ID
- S1223
- Type
- Malware
- Platforms
- Network Devices
- Source
- attack.mitre.org
- MITRE last modified
- 17 Jun 2025
THINCRUST is a Python-based backdoor tool that has been used by UNC3886 since at least 2023.[1]
Techniques used (5)
Groups using it (1)
References
- Mandiant Fortinet Zero Day
