← Back to Feed

MAR-10454006.r5.v1 SUBMARINE, SKIPJACK, SEASPRAY, WHIRLPOOL, and SALTWATER Backdoors

September 7, 2023 · CISA Advisories · Severity: MEDIUM

This malware analysis report from CISA covers multiple backdoor families including SUBMARINE, SKIPJACK, SEASPRAY, WHIRLPOOL, and SALTWATER. These tools provide attackers persistent remote access and data theft capabilities. Defenders are provided with detection signatures and IOCs to identify compromise.

Key Takeaways

  • CISA released malware analysis report MAR-10454006 detailing SUBMARINE SKIPJACK SEASPRAY WHIRLPOOL and SALTWATER backdoors.
  • These backdoor families enable persistent remote access data theft and credential harvesting on compromised networks.
  • Network defenders should deploy detection signatures for these backdoor families and investigate associated IOCs.
☕ Buy a Coffee