216.73.217.139

ZxShell

The MITRE Corporation · Published 24/09/2019 14:59 · Modified 27/03/2026 01:06 Family

Essential information

Confidence
100/100
Is family
Yes
Published
24/09/2019 14:59
Modified
27/03/2026 01:06
Revoked
No
Author / Source
The MITRE Corporation
Related entities
48 attack patterns (mitre), 3 intrusion sets (apt), 5 sectors, 67 indicators

Aliases

Sensocode

Description

[ZxShell](https://attack.mitre.org/software/S0412) is a remote administration tool and backdoor that can be downloaded from the Internet, particularly from Chinese hacker websites. It has been used since at least 2004.(Citation: FireEye APT41 Aug 2019)(Citation: Talos ZxShell Oct 2014)

Marking (TLP)

TLP:CLEAR Copyright 2015-2025, The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation.

External references

Related entities

Attack patterns, malware, vulnerabilities, indicators, intrusion sets and other entities linked to this malware.