Tag: custom backdoors: TWOSTROKE, LIGHTRAIL, DEEPROOT

UNC1549 exploits third-party access, VDI breakouts and custom malware

TL;DR Mandiant's follow-up analysis details UNC1549 campaigns from late 2023 through 2025 targeting aerospace, aviation and defense sectors using supplier…