Godzilla

Godzilla is a malicious software (malware) that has been implicated in a series of cyberattacks, according to reports published by cybersecurity firms such as Trend Micro and CrowdStrike. The malware, once deployed, allows the perpetrators to maintain control over compromised servers through a webshell, enabling them to execute arbitrary commands, upload and download files, manipulate databases, and perform other harmful activities. Notably, the Godzilla malware was utilized in conjunction with other tools like the shellcode loader StealthVector, backdoor components Cobalt Strike, and a new backdoor named SneakCross, demonstrating the advanced techniques employed by the threat actors. The Godzilla malware was first observed in action during an attack on public-facing applications such as Internet Information Services (IIS) servers. This method of initial access allowed the threat actors to deploy the Godzilla webshell for persistence and command-and-control (C2). Subsequent attacks have seen the threat actor diversify its malware and tactics, further indicating the sophistication of their operations. Cybersecurity firm CrowdStrike reported similar tactics, techniques, and procedures (TTPs) used by a group they track as Ethereal Panda, suggesting possible links or shared methodologies between different threat actors. In relation to popular culture, the name "Godzilla" has also been associated with a TV series titled "Monarch: Legacy of Monsters," which was released on November 17, 2023. Set in the world of Godzilla, this cinematic series follows two siblings as they uncover their family ties to the mysterious Monarch organization. However, it's important to note that there's no direct connection between the malware and the TV series; the term "Godzilla" in both contexts refers to different entities.