All Products: What is SUNSHUTTLE / NOBELIUM persistence?
search cancel

All Products: What is SUNSHUTTLE / NOBELIUM persistence?

book

Article ID: 286879

calendar_today

Updated On:

Products

Carbon Black App Control (formerly Cb Protection) Carbon Black Cloud Endpoint Standard (formerly Cb Defense) Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter) Carbon Black EDR (formerly Cb Response)

Issue/Introduction

  • What is SUNSHUTTLE / NOBELIUM persistence threat?
  • List of IOCs to protect against SUNSHUTTLE / NOBELIUM persistence threat

Environment

  • Carbon Black Cloud : All supported versions
  • EDR Server : All supported versions
  • App Control Server: All supported versions

Resolution

The following User eXchange article provides information on SUNSHUTTLE / NOBELIUM persistence:
https://community.carbonblack.com/t5/Threat-Research-Docs/TAU-TIN-SUNSHUTTLE-NOBELIUM-persistence/ta-p/101486
Powered by Wolken Software