A Cereal Offender: Analyzing the CORNFLAKE.V3 Backdoor

Written by: Marco Galli Welcome to the Frontline Bulletin Series Straight from Mandiant Threat Defense , the "Frontline Bulletin" series brings you the latest on the most intriguing compromises we are seeing in the wild right now, equipping our community to understand and respond to the most compelling threats we observe. This edition dissects an infection involving two threat groups, UNC5518 and UNC5774, leading to the deployment of CORNFLAKE.V3. Introduction Since June 2024, Mandiant Threat De