Researchers identify a new post-exploitation tool dubbed “Splinter”
- Researchers have identified a new post-exploitation tool dubbed “Splinter”, which is written in Rust.
- Currently, the researchers have not identified the developer behind the toolkit. Additionally, no threat actor has been observed using Splinter in the wild.
- Features of Splinter includes, executing Windows commands, process injection, harvesting of account information and uploading files.
My thoughts: While Splinter has not been observed in attacks in the wild, it highlights the importance of organisations needing to stay alert to the latest developments in tooling.
Increasingly threat actors are utilising Rust to create malware, some reasons for this includes efficiency, difficulty to reverse engineer, and memory safety functionality.
IoC:
1962cef10cf737300d04a23139122abcc8e8803e54dfcb63054140fbe549bed0
Reference:
https://unit42.paloaltonetworks.com/analysis-pentest-tool-splinter/