WARPWIRE

WARPWIRE is a Javascript credential stealer that targets plaintext passwords and usernames for exfiltration that was used during Cutting Edge to target Ivanti Connect Secure VPNs.

View graph Watch Export

Indicators tracked

Intelligence Reports20

20 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium

Connections

5 relationships

T1132.001: Standard Encoding

source

T1059.007: JavaScript

source

T1056.003: Web Portal Capture

source

T1554: Compromise Host Software Binary

source

T1048.003: Exfiltration Over Unencrypted Non-C2 Protocol

source