PITSTOP — Malware Profile

PITSTOP is a backdoor that was deployed on compromised Ivanti Connect Secure VPNs during Cutting Edge to enable command execution and file read/write.

MITRE ATT&CK techniques (5)

• T1059.004 Unix Shell
• T1140 Deobfuscate/Decode Files or Information
• T1205.002 Socket Filters
• T1559 Inter-Process Communication
• T1573.002 Asymmetric Cryptography

Read the full analysis on IntelFusions