This top security platform is being hacked to carry out malware threats

• Elastic Security Labs recently reported of Shellter Elite being abused
• Someone leaked a license, allowing threat actors to abuse the pentesting tool
• Shellter Project released a patch to address the incidents

A popular commercial pentesting tool was being abused for months in malware delivery campaigns, thanks to a reckless, or possibly even malicious, customer.

Security researchers from Elastic Security Labs found threat actors abusing Shellter Elite, the premium version of SHELLTER, to deploy infostealers and bypass modern antivirus and EDR defenses.

“Elastic Security Labs is observing multiple campaigns that appear to be leveraging the commercial AV/EDR evasion framework, SHELLTER, to load malware,” the researchers said in their report.