Spellbinder
Description
(ESET) Spellbinder enables adversary-in-the-middle (AitM) attacks, through IPv6 stateless address autoconfiguration (SLAAC) spoofing, to move laterally in the compromised network, intercepting packets and redirecting the traffic of legitimate Chinese software so that it downloads malicious updates from a server controlled by the attackers.
Names
| Name |
|---|
| Spellbinder |
Category
Malware
Type
- Backdoor
- Tunneling
- Downloader
Information
Other Information
Uuid
704eb26c-c472-45dc-97cd-985f3153dc6c
Last Card Change
2025-06-27