LIGHTWIRE (1b3af76f-f9a1-58ce-8c7d-aec535f8d0c0)
LIGHTWIRE is a web shell written in Perl that was used during Cutting Edge to maintain access and enable command execution by imbedding into the legitimate compcheckresult.cgi component of Ivanti Secure Connect VPNs.[Mandiant Cutting Edge Part 2 January 2024][Mandiant Cutting Edge January 2024]
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| LIGHTWIRE (1b3af76f-f9a1-58ce-8c7d-aec535f8d0c0) | Tidal Software | UNC5221 (71e9b27e-8d68-4ed6-b3ab-14142558b9ff) | Tidal Groups | 1 |