LookBack
S0582 · Windows
LookBack is a remote access trojan written in C++ that was used against at least three US utility companies in July 2019. The TALONITE activity group has been observed using LookBack.
ATT&CK S0582
Sigma rules0
YARA rules0
Live IOCs0