Loading ATT&CK
LunarWeb is a backdoor that has been used by Turla since at least 2020 including in a compromise of a European ministry of foreign affairs (MFA) together with LunarLoader and LunarMail. LunarWeb has only been observed deployed against servers and can use Steganography to obfuscate command and control.(Citation: ESET Turla Lunar toolset May 2024)
Only techniques sit in a kill chain phase.
| Direction | Type | Related object |
|---|---|---|