Tool
tool:implant
Also: Trojan, bug, fully featured implant, remote access tool
A covert software component placed on a target system to enable remote access and control; the episode also compares it to a Trojan or remote access tool.
A covert software component placed on a target system to enable remote access and control; the episode also compares it to a Trojan or remote access tool.
“I put an implant down on that machine”
“An implant is a bug, a Trojan, a remote access tool”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | AFFECTS | Windows 2012 | Derived | 10 |
| incoming | USES | Nation State Actor | Explicit | 10 |
Nation State Actor USES Implant
The operator installs an implant on the compromised web server and later on an administrator's machine to maintain remote access.
Explicit Confidence 99% · Nsa EP 10 Details
“Once I did that, I put an implant down on that machine”
“we put the implant on his machine”
Implant AFFECTS Windows 2012
The implant caused visible, abnormal Windows behavior after the administrator upgraded to a newer operating-system version; the exact newer version is not stated.
Derived Confidence 68% · Nsa EP 10 Details
“the implant worked from the extent of it went down, installed where it should have, and began operating as expected. The problem was that it wasn’t playing well with the newer version of Windows”