Move over, Cobalt Strike. Splinter’s the new post-exploit menace in town

Unit 42 discovered Splinter, a Rust-written post-exploitation tool found in multiple customer environments that can execute Windows commands, perform remote process injection, upload/download files, collect cloud service account information, and self-destruct; the report includes a sample hash and C2 URL paths to aid detection.