TONY LAMBERT. (2022, June 7). Trapping the Netwire RAT on Linux. Retrieved September 28, 2023.
None recorded.
None recorded.
None recorded.
| Technique | Used by | Procedure example |
|---|---|---|
| T1547.013 XDG Autostart Entries |
ToolPupy | Pupy can use an XDG Autostart to establish persistence. |
| T1547.013 XDG Autostart Entries |
MalwareCrossRAT | CrossRAT can use an XDG Autostart to establish persistence. |
| T1547.013 XDG Autostart Entries |
MalwareFysbis | If executing without root privileges, Fysbis adds a `.desktop` configuration file to the user's `~/.config/autostart` directory. |
Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.
