XenArmorMalware
- xenarmor suite
XenArmor is a suite of password recovery tools for various applications that have been observed to be abused in attacks alongside malware.From MISP Galaxy
Last reported 18 months ago, by Huntress1 report
ATT&CK techniques
3 techniques · each with the sentence it comes from- T1110Brute Force
“…d on 7 Feb 2025, evidence indicated that UltraVNC had been installed on 14 May 2023, and that since that time, it had been subject to brute force password guessing attacks.”
- T1110.001Password Guessing
“…, evidence indicated that UltraVNC had been installed on 14 May 2023, and that since that time, it had been subject to brute force password guessing attacks.”
- T1219Remote Access Tools
“…illustrated in Figure 1, the Huntress 2025 Cyber Threat Report provides insight into what Huntress has observed as the top abused remote access tools.”
What the reports say
1 report, newest first · the exact sentence from each-
Tales of Too Many RMMs“…re transferred to the compromised endpoint via that connection, and several credential theft tools were run, including mimikatz and the XenArmor browser password recovery tool.”
Thanks — we review every report.