EdgeStepper
- Malware type
- downloader
- Profile updated
- 2026-07-07 14:24:29
Targeted industries: government-and-public-sector technology-and-telecommunications
Context
According to ESET Research, EdgeStepper is an adversary-in-the-middle tool, which forwards DNS traffic from machines in a targeted network to a malicious DNS node. This allows the attackers to redirect the traffic from software updates to a hijacking node that serves instructions to the legitimate software to download a malicious update.
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Elf.Edgestepper (report)
- ESET — Plushdaemon Compromises Network Devices For Adversary In The Middle Attacks (report)