Trusted Design

Thrip

アクターID: G0076

· MITRE Pageへのリンク

脅威アクターの詳細

Thrip is an espionage group that has targeted satellite communications, telecoms, and defense contractor companies in the U.S. and Southeast Asia. The group uses custom malware as well as "living off the land" techniques. (Citation: Symantec Thrip June 2018)

脅威アクターの別名・別称

Thrip

利用した攻撃手法

• T1497.002 - User Activity Based Checks
• T1199 - Trusted Relationship
• T1565.002 - Transmitted Data Manipulation
• T1556 - Modify Authentication Process

関連するCVE (攻撃手法に関連)

• CVE-2014-4114 (T1497.002)
• CVE-2015-1770 (T1199)
• CVE-2017-0199 (T1565.002)
• CVE-2012-4969 (T1497.002)
• CVE-2014-6352 (T1199)
• CVE-2016-0998 (T1565.002)
• CVE-2015-8286 (T1565.002)
• CVE-2015-0016 (T1565.002)
• CVE-2017-16929 (T1565.002)
• CVE-2014-3393 (T1565.002)
• CVE-2014-3897 (T1565.002)
• CVE-2017-7255 (T1565.002)

Actor – Pulse グラフ

---

← 脅威アクター一覧に戻る