216.73.216.133

FYAnti

The MITRE Corporation · Published 22/06/2021 16:20 · Modified 27/03/2026 01:03 Family

Essential information

Confidence
100/100
Is family
Yes
Published
22/06/2021 16:20
Modified
27/03/2026 01:03
Revoked
No
Author / Source
The MITRE Corporation
Related entities
4 attack patterns (mitre), 1 intrusion sets (apt)

Aliases

DILLJUICE stage2

Description

[FYAnti](https://attack.mitre.org/software/S0628) is a loader that has been used by [menuPass](https://attack.mitre.org/groups/G0045) since at least 2020, including to deploy [QuasarRAT](https://attack.mitre.org/software/S0262).(Citation: Securelist APT10 March 2021)

Marking (TLP)

Copyright 2015-2025, The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation.

External references