Digest
HIGH

UAT-10147 Deploys SPECTRE: Cross-Platform Implant with Linux Rootkit and BYOVD

Cisco Talos has identified a new, sophisticated implant named SPECTRE, deployed by the UAT-10147 threat actor. This cross-platform malware features C2 operations, process injection, credential theft, anti-analysis protections, and kernel-level EDR bypass capabilities, including Bring Your Own Vulnerable Driver (BYOVD). SPECTRE represents a significant evolution in commodity intrusion tooling, posing a severe threat to various systems.

← Back to the feed

Trending Tags