Forum Moderators: bakedjake
The malware downloads and executes the Metasploit’s “Mettle” meterpreter to maximize its control on infected machines. Shikitega exploits system vulnerabilities to gain high privileges, persist and execute crypto miner. The malware uses a polymorphic encoder to make it more difficult to detect by anti-virus engines. Shikitega abuse legitimate cloud services to store some of its command and control servers (C&C).