TERRIBLETEA

A Go-based backdoor used in exploitation of Ivanti edge devices, including activity associated with UNC5266. It supports command execution, screenshots, keylogging, scanning, proxying, and remote access; it is malware, not a threat-actor name.