216.73.217.172

Havoc

The MITRE Corporation · Published 05/08/2025 20:12 · Modified 31/03/2026 20:49

Essential information

Confidence
100/100
Is family
No
Published
05/08/2025 20:12
Modified
31/03/2026 20:49
Revoked
No
Author / Source
The MITRE Corporation
Related entities
76 attack patterns (mitre), 1 intrusion sets (apt), 5 sectors, 14 countries, 99 indicators, 4 vulnerabilities (cve), 12 reports

Description

[Havoc](https://attack.mitre.org/software/S1229) is an open-source post-exploitation command and control (C2) framework first released on GitHub in October 2022 by C5pider (Paul Ungur), who continues to maintain and develop it with community contributors. [Havoc](https://attack.mitre.org/software/S1229) provides a wide range of offensive security capabilities and has been adopted by multiple threat actors to establish and maintain control over compromised systems.

Marking (TLP)

TLP:CLEAR Copyright 2015-2025, The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation.

External references

Related entities

Attack patterns, malware, vulnerabilities, indicators, intrusion sets and other entities linked to this malware.