H3XA — Operational Evidence

TypeMalware

External ID—

First seen2026-08-14

Last seen2026-08-14

Confidence

—

[HiddenWasp](https://attack.mitre.org/software/S0394) is a Linux-based Trojan used to target systems for remote control. It comes in the form of a statically linked ELF binary with stdlibc++.(Citation: Intezer HiddenWasp Map 2019)

Labels

malware

10 recorded

Relationships

uses

to Deobfuscate/Decode Files or Information

Technique

uses

to Dynamic Linker Hijacking

Technique

uses

to Encrypted/Encoded File

Technique

uses

to Ingress Tool Transfer

Technique

uses

to Local Account

Technique

uses

to Non-Application Layer Protocol

Technique

uses

to RC Scripts

Technique

uses

to Rootkit

Technique

uses

to Symmetric Cryptography

Technique

uses

to Windows Command Shell

Technique

3 external

References

mitre-attack

S0394

open

HiddenWasp

—

Intezer HiddenWasp Map 2019

https://www.intezer.com/blog-hiddenwasp-malware-targeting-linux-systems/

open