MagicWeb
Description
(Microsoft) MagicWeb goes beyond the collection capabilities of FoggyWeb by facilitating covert access directly. MagicWeb is a malicious DLL that allows manipulation of the claims passed in tokens generated by an Active Directory Federated Services (AD FS) server. It manipulates the user authentication certificates used for authentication, not the signing certificates used in attacks like Golden SAML.
Names
| Name |
|---|
| MagicWeb |
Category
Malware
Type
- Backdoor
Information
Other Information
Uuid
4785839c-bd5f-4eee-a4ad-d18415ac2300
Last Card Change
2022-09-12