TRAILBLAZE
- ID
- S9012
- Type
- Malware
- Platforms
- Linux, Network Devices
- Source
- attack.mitre.org
- MITRE last modified
- 23 Apr 2026
TRAILBLAZE is an in-memory dropper used to deploy the passive backdoor BRUSHFIRE. First reported in March 2025, TRAILBLAZE has been observed in operations attributed to People's Republic of China (PRC) state-sponsored affiliated actors, including UNC5221 and SYLVANITE. [1][2][3]