RDFSNIFFER is a module loaded by BOOSTWRITE which allows an attacker to monitor and tamper with legitimate connections made via an application designed to provide visibility and system management capabilities to remote IT techs.
Created: 11 October 2019
Last Modified: 16 October 2019
|Enterprise||T1070||.004||Indicator Removal on Host: File Deletion|
|Enterprise||T1056||.004||Input Capture: Credential API Hooking|
Groups That Use This Software