As cited
Copy frozen at (site build).
threat intel
Taking SHELLTER: a commercial evasion framework abused in-the-wild
Elastic Security Labs identified infostealers leveraging a pirated copy of SHELLTER, a commercial evasion framework, to deliver post-exploitation payloads in active attacks. The unauthorized use of this off-the-shelf tool suggests threat actors are obtaining and repurposing legitimate software to evade detection during payload deployment.
Why it matters: Organizations running endpoint detection and response (EDR) and antivirus tools need to monitor for SHELLTER signatures and behavior patterns, as criminals now use this framework to bypass standard protections during infostealer campaigns.
- Source published
- First seen by Cybersecurity Tracker