Description
FalseFont is a backdoor that researchers documented in attacks against Ukrainian energy organizations in 2023. It gives operators remote shell access and file management on compromised Windows systems, and its deployment followed a broader pattern of disruptive intrusions against the Ukrainian energy sector.
Stats
- First seen
- March 2024
- Last seen
- October 2026
Alert name variants
| Alert Name |
|---|
| ByteCode-MSIL.Backdoor.FalseFont |