#COLDCAT
Malware/Tool
2023-04-11 • Security Update Mandiant Initial Results
COLDCAT is a downloader used in the 3CX compromise. It generates a unique host identifier, beacons to a separately configured command-and-control server through HTTP POST requests, and executes Base64-encoded shellcode returned after a handshake.
-
3
Tagged Reports
-
2
Unique Authors
-
10
Active Days
Tagged Reports
2023-04-20
Mandiant