#PLANKWALK

Malware/Tool

2023-03-09 • Stealing the LIGHTSHOW (Part One) — North Korea's UNC2970

PLANKWALK is a C++ HTTP backdoor that uses layered DLL side-loading, decrypts an on-disk payload and configuration, and communicates through command-and-control infrastructure hosted on compromised WordPress sites.

Tagged Reports

« Back