IOC pivotioc · name
AveMaria
?? · UnknownScattered Spiderconfidence · high
Commodity remote-access trojan (also tracked as WarZone, MITRE S0670) used by Scattered Spider for hands-on-keyboard access post-compromise, per Table 2 of CISA AA23-320A.
- family
- AveMaria/WarZone
- first seen
- Nov 15, 2023
- publisher
- CISA