BOLDMOVE

Description

(Mandiant) With BOLDMOVE, the attackers not only developed an exploit, but malware that shows an in-depth understanding of systems, services, logging, and undocumented proprietary formats. Malware running on an internet-connected device can enable lateral movement further into a network and enable command and control (C2) by tunneling commands in and data out of a network.

Names

Name
BOLDMOVE

Category

Malware

Type

• Backdoor

Information

• https://www.mandiant.com/resources/blog/chinese-actors-exploit-fortios-flaw

Mitre Attack

• https://attack.mitre.org/software/S1184

Malpedia

• https://malpedia.caad.fkie.fraunhofer.de/details/elf.boldmove
• https://malpedia.caad.fkie.fraunhofer.de/details/win.boldmove

Other Information

Uuid

e25106ad-3057-4086-a266-034b961892c3

Last Card Change

2025-06-28