CMDEmber

Description

(SentinelLabs) CMDEmber interacts with a Google Firebase Realtime Database instance that has the role of a C2 server.

Names

Name
CMDEmber

Category

Malware

Type

• Backdoor

Information

• https://www.sentinelone.com/labs/wip26-espionage-threat-actors-abuse-cloud-infrastructure-in-targeted-telco-attacks/

Other Information

Uuid

65a9b500-18f7-4049-8f52-7d3609741718

Last Card Change

2023-02-17