Tag: shadowpad light

2 Attack Reports | 0 Vulnerabilities

Attack reports

ShadowRelay: New Modular Backdoor in the Public Sector

A new modular backdoor called ShadowRelay was discovered on a compromised Exchange server in a government organization. The backdoor allows loading different plugins and demonstrates sophisticated design indicative of well-prepared attackers. It uses packet injection to hide network activity and ca…
backdoor
apt
espionage
modular
government
CVE-2021-34473
shadowpad
CVE-2021-31207
CVE-2021-34523
shadowpad light
exchange
mythic agent
2026-01-23
donnect
packet injection
shadowrelay
Published: January 23, 2026
Linked vulnerabilities : CVE-2021-34473, CVE-2021-31207, CVE-2021-34523
Downloadable IOCs: 5

Erudite Mogwai Uses Custom Stowaway to Stealthily Advance Online

The Solar 4RAYS team discovered a malicious campaign targeting Russian IT organizations providing services to the government sector. They found a customized version of the open-source Stowaway proxy tool being used by the threat actor Erudite Mogwai (also known as Space Pirates). The attackers modi…
apt
2025-02-26
proxy tool
shadowpad light
luckystrike agent
stowaway
Published: February 26, 2025
Downloadable IOCs: 12
Click here to see more Attack Reports