Trusted Design

FBI CYWATCH A-000067-DM

概要

The FBI has obtained and validated information regarding a group of malicious cyber actors who have compromised and stolen sensitive information from various government and commercial networks. This group utilized the domains listed herein in furtherance of computer network exploitation (CNE) activities in the United States and abroad since at least 2011. Research and analysis indicate that these domains were associated with the command and control (C2) of customized malicious software. Furthermore, these domains have also been used to host malicious files – often through embedded links in spear phish emails. Any activity related to these domains detected on a network should be considered an indication of a compromise requiring mitigation and contact with law enforcement.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

このPulseに関連する脅威アクター (事実ベース)

Volt Typhoon

Score: 48.41
Matched TTPs:
  • T1592 - Gather Victim Host Information
  • T1584.008 - Network Devices
  • T1594 - Search Victim-Owned Websites
  • T1590.004 - Network Topology
  • T1589.002 - Email Addresses
  • T1584.005 - Botnet
  • T1591 - Gather Victim Org Information
  • T1590 - Gather Victim Network Information
  • T1593 - Search Open Websites/Domains
  • T1588.002 - Tool
  • T1078.002 - Domain Accounts
  • T1591.004 - Identify Roles
  • T1584.004 - Server
  • T1596.005 - Scan Databases
  • T1680 - Local Storage Discovery
MITREへのリンク →

LAPSUS$

Score: 30.44
Matched TTPs:
  • T1597.002 - Purchase Technical Data
  • T1586.002 - Email Accounts
  • T1589.002 - Email Addresses
  • T1598.004 - Spearphishing Voice
  • T1591.002 - Business Relationships
  • T1204 - User Execution
  • T1588.002 - Tool
  • T1584.002 - DNS Server
  • T1591.004 - Identify Roles
MITREへのリンク →

Scattered Spider

Score: 26.81
Matched TTPs:
  • T1564.008 - Email Hiding Rules
  • T1114 - Email Collection
  • T1598.003 - Spearphishing Link
  • T1583.001 - Domains
  • T1598.004 - Spearphishing Voice
  • T1657 - Financial Theft
  • T1204 - User Execution
  • T1588.002 - Tool
  • T1598 - Phishing for Information
MITREへのリンク →

FIN4

Score: 6.94
Matched TTPs:
  • T1564.008 - Email Hiding Rules
  • T1566.002 - Spearphishing Link
  • T1204.001 - Malicious Link
MITREへのリンク →

Ember Bear

Score: 22.45
Matched TTPs:
  • T1491.002 - External Defacement
  • T1114 - Email Collection
  • T1036 - Masquerading
  • T1210 - Exploitation of Remote Services
  • T1203 - Exploitation for Client Execution
  • T1595.001 - Scanning IP Blocks
  • T1588.005 - Exploits
MITREへのリンク →

Sandworm Team

Score: 55.01
Matched TTPs:
  • T1491.002 - External Defacement
  • T1594 - Search Victim-Owned Websites
  • T1587.001 - Malware
  • T1566.002 - Spearphishing Link
  • T1598.003 - Spearphishing Link
  • T1040 - Network Sniffing
  • T1608.001 - Upload Malware
  • T1583.001 - Domains
  • T1036 - Masquerading
  • T1589.002 - Email Addresses
  • T1591.002 - Business Relationships
  • T1584.005 - Botnet
  • T1593 - Search Open Websites/Domains
  • T1588.002 - Tool
  • T1592.002 - Software
  • T1102.002 - Bidirectional Communication
  • T1203 - Exploitation for Client Execution
  • T1078.002 - Domain Accounts
  • T1584.004 - Server
  • T1590.001 - Domain Properties
  • T1204.001 - Malicious Link
MITREへのリンク →

Andariel

Score: 10.95
Matched TTPs:
  • T1590.005 - IP Addresses
  • T1592.002 - Software
  • T1203 - Exploitation for Client Execution
  • T1189 - Drive-by Compromise
MITREへのリンク →

Magic Hound

Score: 44.55
Matched TTPs:
  • T1590.005 - IP Addresses
  • T1114 - Email Collection
  • T1566.002 - Spearphishing Link
  • T1598.003 - Spearphishing Link
  • T1586.002 - Email Accounts
  • T1583.001 - Domains
  • T1589.002 - Email Addresses
  • T1588.002 - Tool
  • T1592.002 - Software
  • T1102.002 - Bidirectional Communication
  • T1078.002 - Domain Accounts
  • T1036.010 - Masquerade Account Name
  • T1189 - Drive-by Compromise
  • T1591.001 - Determine Physical Locations
  • T1204.001 - Malicious Link
  • T1566.003 - Spearphishing via Service
  • T1584.001 - Domains
MITREへのリンク →

HAFNIUM

Score: 18.37
Matched TTPs:
  • T1590.005 - IP Addresses
  • T1589.002 - Email Addresses
  • T1592.004 - Client Configurations
  • T1584.005 - Botnet
  • T1590 - Gather Victim Network Information
MITREへのリンク →

APT41

Score: 17.14
Matched TTPs:
  • T1568.002 - Domain Generation Algorithms
  • T1588.002 - Tool
  • T1203 - Exploitation for Client Execution
  • T1595.003 - Wordlist Scanning
  • T1596.005 - Scan Databases
  • T1569.002 - Service Execution
MITREへのリンク →

TA551

Score: 11.59
Matched TTPs:
  • T1568.002 - Domain Generation Algorithms
  • T1036 - Masquerading
  • T1589.002 - Email Addresses
  • T1218.010 - Regsvr32
MITREへのリンク →

APT28

Score: 48.66
Matched TTPs:
  • T1584.008 - Network Devices
  • T1598.003 - Spearphishing Link
  • T1040 - Network Sniffing
  • T1586.002 - Email Accounts
  • T1583.001 - Domains
  • T1036 - Masquerading
  • T1596 - Search Open Technical Databases
  • T1591 - Gather Victim Org Information
  • T1210 - Exploitation of Remote Services
  • T1588.002 - Tool
  • T1039 - Data from Network Shared Drive
  • T1102.002 - Bidirectional Communication
  • T1203 - Exploitation for Client Execution
  • T1598 - Phishing for Information
  • T1189 - Drive-by Compromise
  • T1204.001 - Malicious Link
  • T1669 - Wi-Fi Networks
  • T1211 - Exploitation for Defense Evasion
MITREへのリンク →

ZIRCONIUM

Score: 18.43
Matched TTPs:
  • T1584.008 - Network Devices
  • T1566.002 - Spearphishing Link
  • T1598.003 - Spearphishing Link
  • T1583.001 - Domains
  • T1036 - Masquerading
  • T1102.002 - Bidirectional Communication
  • T1598 - Phishing for Information
  • T1204.001 - Malicious Link
MITREへのリンク →

Leviathan

Score: 26.22
Matched TTPs:
  • T1584.008 - Network Devices
  • T1566.002 - Spearphishing Link
  • T1586.002 - Email Accounts
  • T1583.001 - Domains
  • T1534 - Internal Spearphishing
  • T1218.010 - Regsvr32
  • T1203 - Exploitation for Client Execution
  • T1189 - Drive-by Compromise
  • T1584.004 - Server
  • T1204.001 - Malicious Link
  • T1027.015 - Compression
MITREへのリンク →

Mustard Tempest

Score: 18.91
Matched TTPs:
  • T1583.008 - Malvertising
  • T1566.002 - Spearphishing Link
  • T1608.001 - Upload Malware
  • T1189 - Drive-by Compromise
  • T1608.006 - SEO Poisoning
  • T1204.001 - Malicious Link
  • T1584.001 - Domains
MITREへのリンク →

Silent Librarian

Score: 14.26
Matched TTPs:
  • T1114 - Email Collection
  • T1594 - Search Victim-Owned Websites
  • T1598.003 - Spearphishing Link
  • T1583.001 - Domains
  • T1589.002 - Email Addresses
  • T1588.002 - Tool
MITREへのリンク →

Kimsuky

Score: 66.02
Matched TTPs:
  • T1594 - Search Victim-Owned Websites
  • T1587.001 - Malware
  • T1566.002 - Spearphishing Link
  • T1598.003 - Spearphishing Link
  • T1040 - Network Sniffing
  • T1586.002 - Email Accounts
  • T1608.001 - Upload Malware
  • T1583.001 - Domains
  • T1596 - Search Open Technical Databases
  • T1589.002 - Email Addresses
  • T1657 - Financial Theft
  • T1591 - Gather Victim Org Information
  • T1534 - Internal Spearphishing
  • T1593 - Search Open Websites/Domains
  • T1588.002 - Tool
  • T1566 - Phishing
  • T1218.010 - Regsvr32
  • T1593.001 - Social Media
  • T1102.002 - Bidirectional Communication
  • T1598 - Phishing for Information
  • T1204.001 - Malicious Link
  • T1680 - Local Storage Discovery
  • T1588.005 - Exploits
  • T1584.001 - Domains
MITREへのリンク →

EXOTIC LILY

Score: 24.50
Matched TTPs:
  • T1594 - Search Victim-Owned Websites
  • T1566.002 - Spearphishing Link
  • T1608.001 - Upload Malware
  • T1583.001 - Domains
  • T1589.002 - Email Addresses
  • T1597 - Search Closed Sources
  • T1593.001 - Social Media
  • T1203 - Exploitation for Client Execution
  • T1204.001 - Malicious Link
  • T1566.003 - Spearphishing via Service
MITREへのリンク →

TA578

Score: 4.65
Matched TTPs:
  • T1594 - Search Victim-Owned Websites
  • T1204.001 - Malicious Link
MITREへのリンク →

FIN13

Score: 11.50
Matched TTPs:
  • T1587.001 - Malware
  • T1590.004 - Network Topology
  • T1036 - Masquerading
  • T1657 - Financial Theft
  • T1588.002 - Tool
MITREへのリンク →

Moonstone Sleet

Score: 22.21
Matched TTPs:
  • T1587.001 - Malware
  • T1598.003 - Spearphishing Link
  • T1608.001 - Upload Malware
  • T1583.001 - Domains
  • T1589.002 - Email Addresses
  • T1591 - Gather Victim Org Information
  • T1598 - Phishing for Information
  • T1569.002 - Service Execution
  • T1566.003 - Spearphishing via Service
MITREへのリンク →

Indrik Spider

Score: 11.06
Matched TTPs:
  • T1587.001 - Malware
  • T1590 - Gather Victim Network Information
  • T1078.002 - Domain Accounts
  • T1584.004 - Server
MITREへのリンク →

Lazarus Group

Score: 33.54
Matched TTPs:
  • T1587.001 - Malware
  • T1566.002 - Spearphishing Link
  • T1583.001 - Domains
  • T1589.002 - Email Addresses
  • T1491.001 - Internal Defacement
  • T1591 - Gather Victim Org Information
  • T1588.002 - Tool
  • T1102.002 - Bidirectional Communication
  • T1203 - Exploitation for Client Execution
  • T1189 - Drive-by Compromise
  • T1584.004 - Server
  • T1027.007 - Dynamic API Resolution
  • T1680 - Local Storage Discovery
  • T1566.003 - Spearphishing via Service
MITREへのリンク →

Contagious Interview

Score: 30.83
Matched TTPs:
  • T1587.001 - Malware
  • T1608.001 - Upload Malware
  • T1583.001 - Domains
  • T1036 - Masquerading
  • T1681 - Search Threat Vendor Data
  • T1657 - Financial Theft
  • T1593 - Search Open Websites/Domains
  • T1588.002 - Tool
  • T1593.001 - Social Media
  • T1204.004 - Malicious Copy and Paste
  • T1204.001 - Malicious Link
  • T1566.003 - Spearphishing via Service
MITREへのリンク →

OilRig

Score: 23.55
Matched TTPs:
  • T1587.001 - Malware
  • T1566.002 - Spearphishing Link
  • T1586.002 - Email Accounts
  • T1608.001 - Upload Malware
  • T1583.001 - Domains
  • T1036 - Masquerading
  • T1588.002 - Tool
  • T1027.005 - Indicator Removal from Tools
  • T1203 - Exploitation for Client Execution
  • T1078.002 - Domain Accounts
  • T1204.001 - Malicious Link
  • T1566.003 - Spearphishing via Service
MITREへのリンク →

UNC3886

Score: 13.91
Matched TTPs:
  • T1587.001 - Malware
  • T1040 - Network Sniffing
  • T1681 - Search Threat Vendor Data
  • T1027.005 - Indicator Removal from Tools
  • T1203 - Exploitation for Client Execution
MITREへのリンク →

LuminousMoth

Score: 7.72
Matched TTPs:
  • T1587.001 - Malware
  • T1566.002 - Spearphishing Link
  • T1608.001 - Upload Malware
  • T1588.002 - Tool
  • T1204.001 - Malicious Link
MITREへのリンク →

Salt Typhoon

Score: 9.82
Matched TTPs:
  • T1587.001 - Malware
  • T1040 - Network Sniffing
  • T1590.004 - Network Topology
  • T1588.002 - Tool
MITREへのリンク →

APT29

Score: 21.51
Matched TTPs:
  • T1587.001 - Malware
  • T1566.002 - Spearphishing Link
  • T1586.002 - Email Accounts
  • T1588.002 - Tool
  • T1203 - Exploitation for Client Execution
  • T1090.004 - Domain Fronting
  • T1562.008 - Disable or Modify Cloud Logs
  • T1204.001 - Malicious Link
  • T1566.003 - Spearphishing via Service
MITREへのリンク →

Play

Score: 7.75
Matched TTPs:
  • T1587.001 - Malware
  • T1657 - Financial Theft
  • T1588.002 - Tool
  • T1078.002 - Domain Accounts
MITREへのリンク →

Aoqin Dragon

Score: 6.62
Matched TTPs:
  • T1587.001 - Malware
  • T1036 - Masquerading
  • T1588.002 - Tool
  • T1203 - Exploitation for Client Execution
MITREへのリンク →

RedCurl

Score: 7.94
Matched TTPs:
  • T1587.001 - Malware
  • T1566.002 - Spearphishing Link
  • T1039 - Data from Network Shared Drive
  • T1204.001 - Malicious Link
MITREへのリンク →

Turla

Score: 15.90
Matched TTPs:
  • T1587.001 - Malware
  • T1566.002 - Spearphishing Link
  • T1588.002 - Tool
  • T1027.005 - Indicator Removal from Tools
  • T1102.002 - Bidirectional Communication
  • T1189 - Drive-by Compromise
  • T1584.004 - Server
  • T1204.001 - Malicious Link
MITREへのリンク →

Ke3chang

Score: 5.34
Matched TTPs:
  • T1587.001 - Malware
  • T1588.002 - Tool
  • T1569.002 - Service Execution
MITREへのリンク →

Mustang Panda

Score: 27.82
Matched TTPs:
  • T1587.001 - Malware
  • T1566.002 - Spearphishing Link
  • T1598.003 - Spearphishing Link
  • T1586.002 - Email Accounts
  • T1608.001 - Upload Malware
  • T1583.001 - Domains
  • T1593 - Search Open Websites/Domains
  • T1678 - Delay Execution
  • T1588.002 - Tool
  • T1203 - Exploitation for Client Execution
  • T1027.007 - Dynamic API Resolution
  • T1204.001 - Malicious Link
MITREへのリンク →

TeamTNT

Score: 14.74
Matched TTPs:
  • T1587.001 - Malware
  • T1608.001 - Upload Malware
  • T1583.001 - Domains
  • T1036 - Masquerading
  • T1595.001 - Scanning IP Blocks
  • T1680 - Local Storage Discovery
MITREへのリンク →

FIN7

Score: 28.23
Matched TTPs:
  • T1587.001 - Malware
  • T1566.002 - Spearphishing Link
  • T1608.001 - Upload Malware
  • T1583.001 - Domains
  • T1674 - Input Injection
  • T1591 - Gather Victim Org Information
  • T1210 - Exploitation of Remote Services
  • T1588.002 - Tool
  • T1102.002 - Bidirectional Communication
  • T1591.004 - Identify Roles
  • T1204.001 - Malicious Link
  • T1569.002 - Service Execution
MITREへのリンク →

BlackTech

Score: 5.15
Matched TTPs:
  • T1566.002 - Spearphishing Link
  • T1588.002 - Tool
  • T1203 - Exploitation for Client Execution
  • T1204.001 - Malicious Link
MITREへのリンク →

MuddyWater

Score: 10.29
Matched TTPs:
  • T1566.002 - Spearphishing Link
  • T1210 - Exploitation of Remote Services
  • T1588.002 - Tool
  • T1102.002 - Bidirectional Communication
  • T1203 - Exploitation for Client Execution
  • T1204.001 - Malicious Link
MITREへのリンク →

Confucius

Score: 7.13
Matched TTPs:
  • T1566.002 - Spearphishing Link
  • T1203 - Exploitation for Client Execution
  • T1204.001 - Malicious Link
  • T1680 - Local Storage Discovery
MITREへのリンク →

Mofang

Score: 5.96
Matched TTPs:
  • T1566.002 - Spearphishing Link
  • T1204.001 - Malicious Link
  • T1027.015 - Compression
MITREへのリンク →

Sidewinder

Score: 10.38
Matched TTPs:
  • T1566.002 - Spearphishing Link
  • T1598.003 - Spearphishing Link
  • T1598.002 - Spearphishing Attachment
  • T1203 - Exploitation for Client Execution
  • T1204.001 - Malicious Link
MITREへのリンク →

Elderwood

Score: 6.07
Matched TTPs:
  • T1566.002 - Spearphishing Link
  • T1203 - Exploitation for Client Execution
  • T1189 - Drive-by Compromise
  • T1204.001 - Malicious Link
MITREへのリンク →

Machete

Score: 4.57
Matched TTPs:
  • T1566.002 - Spearphishing Link
  • T1189 - Drive-by Compromise
  • T1204.001 - Malicious Link
MITREへのリンク →

Transparent Tribe

Score: 10.87
Matched TTPs:
  • T1566.002 - Spearphishing Link
  • T1583.001 - Domains
  • T1203 - Exploitation for Client Execution
  • T1189 - Drive-by Compromise
  • T1204.001 - Malicious Link
  • T1584.001 - Domains
MITREへのリンク →

FIN8

Score: 3.66
Matched TTPs:
  • T1566.002 - Spearphishing Link
  • T1588.002 - Tool
  • T1204.001 - Malicious Link
MITREへのリンク →

APT32

Score: 22.72
Matched TTPs:
  • T1566.002 - Spearphishing Link
  • T1598.003 - Spearphishing Link
  • T1608.001 - Upload Malware
  • T1583.001 - Domains
  • T1036 - Masquerading
  • T1589.002 - Email Addresses
  • T1588.002 - Tool
  • T1218.010 - Regsvr32
  • T1203 - Exploitation for Client Execution
  • T1189 - Drive-by Compromise
  • T1204.001 - Malicious Link
  • T1569.002 - Service Execution
MITREへのリンク →

APT3

Score: 13.36
Matched TTPs:
  • T1566.002 - Spearphishing Link
  • T1027.005 - Indicator Removal from Tools
  • T1203 - Exploitation for Client Execution
  • T1078.002 - Domain Accounts
  • T1036.010 - Masquerade Account Name
  • T1204.001 - Malicious Link
MITREへのリンク →

APT1

Score: 7.10
Matched TTPs:
  • T1566.002 - Spearphishing Link
  • T1583.001 - Domains
  • T1588.002 - Tool
  • T1584.001 - Domains
MITREへのリンク →

APT33

Score: 12.32
Matched TTPs:
  • T1566.002 - Spearphishing Link
  • T1040 - Network Sniffing
  • T1552.006 - Group Policy Preferences
  • T1588.002 - Tool
  • T1203 - Exploitation for Client Execution
  • T1204.001 - Malicious Link
MITREへのリンク →

Molerats

Score: 5.96
Matched TTPs:
  • T1566.002 - Spearphishing Link
  • T1204.001 - Malicious Link
  • T1027.015 - Compression
MITREへのリンク →

Windshift

Score: 13.41
Matched TTPs:
  • T1566.002 - Spearphishing Link
  • T1036 - Masquerading
  • T1036.001 - Invalid Code Signature
  • T1189 - Drive-by Compromise
  • T1204.001 - Malicious Link
  • T1566.003 - Spearphishing via Service
MITREへのリンク →

Cobalt Group

Score: 7.90
Matched TTPs:
  • T1566.002 - Spearphishing Link
  • T1588.002 - Tool
  • T1218.010 - Regsvr32
  • T1203 - Exploitation for Client Execution
  • T1204.001 - Malicious Link
MITREへのリンク →

TA2541

Score: 10.30
Matched TTPs:
  • T1566.002 - Spearphishing Link
  • T1608.001 - Upload Malware
  • T1583.001 - Domains
  • T1588.002 - Tool
  • T1204.001 - Malicious Link
  • T1027.015 - Compression
MITREへのリンク →

Earth Lusca

Score: 14.49
Matched TTPs:
  • T1566.002 - Spearphishing Link
  • T1608.001 - Upload Malware
  • T1583.001 - Domains
  • T1210 - Exploitation of Remote Services
  • T1588.002 - Tool
  • T1189 - Drive-by Compromise
  • T1584.004 - Server
  • T1204.001 - Malicious Link
MITREへのリンク →

Storm-1811

Score: 16.68
Matched TTPs:
  • T1566.002 - Spearphishing Link
  • T1583.001 - Domains
  • T1036 - Masquerading
  • T1588.002 - Tool
  • T1566.004 - Spearphishing Voice
  • T1036.010 - Masquerade Account Name
  • T1566.003 - Spearphishing via Service
MITREへのリンク →

Wizard Spider

Score: 15.22
Matched TTPs:
  • T1566.002 - Spearphishing Link
  • T1552.006 - Group Policy Preferences
  • T1210 - Exploitation of Remote Services
  • T1588.002 - Tool
  • T1078.002 - Domain Accounts
  • T1204.001 - Malicious Link
  • T1569.002 - Service Execution
MITREへのリンク →

TA577

Score: 5.47
Matched TTPs:
  • T1566.002 - Spearphishing Link
  • T1586.002 - Email Accounts
  • T1204.001 - Malicious Link
MITREへのリンク →

Patchwork

Score: 15.36
Matched TTPs:
  • T1566.002 - Spearphishing Link
  • T1598.003 - Spearphishing Link
  • T1588.002 - Tool
  • T1027.005 - Indicator Removal from Tools
  • T1203 - Exploitation for Client Execution
  • T1189 - Drive-by Compromise
  • T1204.001 - Malicious Link
  • T1680 - Local Storage Discovery
MITREへのリンク →

TA505

Score: 9.43
Matched TTPs:
  • T1566.002 - Spearphishing Link
  • T1608.001 - Upload Malware
  • T1583.001 - Domains
  • T1588.002 - Tool
  • T1078.002 - Domain Accounts
  • T1204.001 - Malicious Link
MITREへのリンク →

LazyScripter

Score: 8.48
Matched TTPs:
  • T1566.002 - Spearphishing Link
  • T1608.001 - Upload Malware
  • T1583.001 - Domains
  • T1036 - Masquerading
  • T1204.001 - Malicious Link
MITREへのリンク →

APT42

Score: 5.79
Matched TTPs:
  • T1566.002 - Spearphishing Link
  • T1608.001 - Upload Malware
  • T1583.001 - Domains
  • T1588.002 - Tool
MITREへのリンク →

APT39

Score: 8.45
Matched TTPs:
  • T1566.002 - Spearphishing Link
  • T1588.002 - Tool
  • T1102.002 - Bidirectional Communication
  • T1204.001 - Malicious Link
  • T1569.002 - Service Execution
MITREへのリンク →

Star Blizzard

Score: 16.37
Matched TTPs:
  • T1598.003 - Spearphishing Link
  • T1586.002 - Email Accounts
  • T1608.001 - Upload Malware
  • T1583.001 - Domains
  • T1598.002 - Spearphishing Attachment
  • T1593 - Search Open Websites/Domains
  • T1588.002 - Tool
MITREへのリンク →

CURIUM

Score: 8.26
Matched TTPs:
  • T1598.003 - Spearphishing Link
  • T1583.001 - Domains
  • T1189 - Drive-by Compromise
  • T1566.003 - Spearphishing via Service
MITREへのリンク →

Dragonfly

Score: 24.75
Matched TTPs:
  • T1598.003 - Spearphishing Link
  • T1583.001 - Domains
  • T1591.002 - Business Relationships
  • T1598.002 - Spearphishing Attachment
  • T1210 - Exploitation of Remote Services
  • T1588.002 - Tool
  • T1203 - Exploitation for Client Execution
  • T1036.010 - Masquerade Account Name
  • T1189 - Drive-by Compromise
  • T1584.004 - Server
MITREへのリンク →

Velvet Ant

Score: 9.56
Matched TTPs:
  • T1040 - Network Sniffing
  • T1569.002 - Service Execution
  • T1211 - Exploitation for Defense Evasion
MITREへのリンク →

DarkVishnya

Score: 3.88
Matched TTPs:
  • T1040 - Network Sniffing
  • T1588.002 - Tool
MITREへのリンク →

HEXANE

Score: 19.17
Matched TTPs:
  • T1586.002 - Email Accounts
  • T1608.001 - Upload Malware
  • T1583.001 - Domains
  • T1589.002 - Email Addresses
  • T1534 - Internal Spearphishing
  • T1588.002 - Tool
  • T1102.002 - Bidirectional Communication
  • T1591.004 - Identify Roles
MITREへのリンク →

IndigoZebra

Score: 5.03
Matched TTPs:
  • T1586.002 - Email Accounts
  • T1583.001 - Domains
  • T1588.002 - Tool
MITREへのリンク →

Gamaredon Group

Score: 26.29
Matched TTPs:
  • T1608.001 - Upload Malware
  • T1583.001 - Domains
  • T1491.001 - Internal Defacement
  • T1534 - Internal Spearphishing
  • T1588.002 - Tool
  • T1001 - Data Obfuscation
  • T1039 - Data from Network Shared Drive
  • T1102.002 - Bidirectional Communication
  • T1204.001 - Malicious Link
  • T1027.015 - Compression
MITREへのリンク →

Threat Group-3390

Score: 17.63
Matched TTPs:
  • T1608.001 - Upload Malware
  • T1583.001 - Domains
  • T1608.002 - Upload Tool
  • T1210 - Exploitation of Remote Services
  • T1588.002 - Tool
  • T1203 - Exploitation for Client Execution
  • T1189 - Drive-by Compromise
  • T1027.015 - Compression
MITREへのリンク →

SideCopy

Score: 8.88
Matched TTPs:
  • T1608.001 - Upload Malware
  • T1598.002 - Spearphishing Attachment
  • T1584.001 - Domains
MITREへのリンク →

BlackByte

Score: 10.50
Matched TTPs:
  • T1608.001 - Upload Malware
  • T1491.001 - Internal Defacement
  • T1078.002 - Domain Accounts
  • T1569.002 - Service Execution
MITREへのリンク →

BITTER

Score: 5.83
Matched TTPs:
  • T1608.001 - Upload Malware
  • T1583.001 - Domains
  • T1588.002 - Tool
  • T1203 - Exploitation for Client Execution
MITREへのリンク →

Saint Bear

Score: 7.35
Matched TTPs:
  • T1608.001 - Upload Malware
  • T1589.002 - Email Addresses
  • T1203 - Exploitation for Client Execution
  • T1204.001 - Malicious Link
MITREへのリンク →

Sea Turtle

Score: 11.28
Matched TTPs:
  • T1583.001 - Domains
  • T1588.002 - Tool
  • T1566 - Phishing
  • T1203 - Exploitation for Client Execution
  • T1584.002 - DNS Server
MITREへのリンク →

APT38

Score: 7.89
Matched TTPs:
  • T1583.001 - Domains
  • T1588.002 - Tool
  • T1189 - Drive-by Compromise
  • T1204.001 - Malicious Link
  • T1569.002 - Service Execution
MITREへのリンク →

Winter Vivern

Score: 6.83
Matched TTPs:
  • T1583.001 - Domains
  • T1036 - Masquerading
  • T1189 - Drive-by Compromise
  • T1204.001 - Malicious Link
MITREへのリンク →

menuPass

Score: 10.33
Matched TTPs:
  • T1583.001 - Domains
  • T1036 - Masquerading
  • T1210 - Exploitation of Remote Services
  • T1588.002 - Tool
  • T1039 - Data from Network Shared Drive
MITREへのリンク →

BRONZE BUTLER

Score: 9.33
Matched TTPs:
  • T1036 - Masquerading
  • T1588.002 - Tool
  • T1039 - Data from Network Shared Drive
  • T1203 - Exploitation for Client Execution
  • T1189 - Drive-by Compromise
MITREへのリンク →

Agrius

Score: 4.47
Matched TTPs:
  • T1036 - Masquerading
  • T1078.002 - Domain Accounts
MITREへのリンク →

PLATINUM

Score: 3.95
Matched TTPs:
  • T1036 - Masquerading
  • T1189 - Drive-by Compromise
MITREへのリンク →

Medusa Group

Score: 14.44
Matched TTPs:
  • T1608.002 - Upload Tool
  • T1657 - Financial Theft
  • T1588.002 - Tool
  • T1569.002 - Service Execution
  • T1218.014 - MMC
MITREへのリンク →

Axiom

Score: 14.70
Matched TTPs:
  • T1584.005 - Botnet
  • T1566 - Phishing
  • T1203 - Exploitation for Client Execution
  • T1189 - Drive-by Compromise
  • T1001.002 - Steganography
MITREへのリンク →

INC Ransom

Score: 9.06
Matched TTPs:
  • T1657 - Financial Theft
  • T1588.002 - Tool
  • T1566 - Phishing
  • T1569.002 - Service Execution
MITREへのリンク →

Cinnamon Tempest

Score: 5.66
Matched TTPs:
  • T1657 - Financial Theft
  • T1588.002 - Tool
  • T1078.002 - Domain Accounts
MITREへのリンク →

Storm-0501

Score: 5.27
Matched TTPs:
  • T1657 - Financial Theft
  • T1218.010 - Regsvr32
MITREへのリンク →

AppleJeus

Score: 5.81
Matched TTPs:
  • T1657 - Financial Theft
  • T1566 - Phishing
MITREへのリンク →

Fox Kitten

Score: 5.78
Matched TTPs:
  • T1210 - Exploitation of Remote Services
  • T1039 - Data from Network Shared Drive
MITREへのリンク →

Tonto Team

Score: 4.24
Matched TTPs:
  • T1210 - Exploitation of Remote Services
  • T1203 - Exploitation for Client Execution
MITREへのリンク →

Inception

Score: 5.09
Matched TTPs:
  • T1588.002 - Tool
  • T1218.010 - Regsvr32
  • T1203 - Exploitation for Client Execution
MITREへのリンク →

GALLIUM

Score: 4.00
Matched TTPs:
  • T1588.002 - Tool
  • T1027.005 - Indicator Removal from Tools
MITREへのリンク →

FIN6

Score: 5.77
Matched TTPs:
  • T1588.002 - Tool
  • T1569.002 - Service Execution
  • T1566.003 - Spearphishing via Service
MITREへのリンク →

WIRTE

Score: 3.60
Matched TTPs:
  • T1588.002 - Tool
  • T1218.010 - Regsvr32
MITREへのリンク →

POLONIUM

Score: 3.25
Matched TTPs:
  • T1588.002 - Tool
  • T1102.002 - Bidirectional Communication
MITREへのリンク →

Aquatic Panda

Score: 3.14
Matched TTPs:
  • T1588.002 - Tool
  • T1078.002 - Domain Accounts
MITREへのリンク →

Silence

Score: 3.25
Matched TTPs:
  • T1588.002 - Tool
  • T1569.002 - Service Execution
MITREへのリンク →

Chimera

Score: 11.40
Matched TTPs:
  • T1588.002 - Tool
  • T1039 - Data from Network Shared Drive
  • T1078.002 - Domain Accounts
  • T1569.002 - Service Execution
  • T1680 - Local Storage Discovery
MITREへのリンク →

APT19

Score: 5.36
Matched TTPs:
  • T1588.002 - Tool
  • T1218.010 - Regsvr32
  • T1189 - Drive-by Compromise
MITREへのリンク →

Blue Mockingbird

Score: 5.99
Matched TTPs:
  • T1588.002 - Tool
  • T1218.010 - Regsvr32
  • T1569.002 - Service Execution
MITREへのリンク →

Carbanak

Score: 3.25
Matched TTPs:
  • T1588.002 - Tool
  • T1102.002 - Bidirectional Communication
MITREへのリンク →

GOLD SOUTHFIELD

Score: 3.29
Matched TTPs:
  • T1566 - Phishing
MITREへのリンク →

Sowbug

Score: 3.03
Matched TTPs:
  • T1039 - Data from Network Shared Drive
MITREへのリンク →

Deep Panda

Score: 5.90
Matched TTPs:
  • T1027.005 - Indicator Removal from Tools
  • T1218.010 - Regsvr32
MITREへのリンク →

APT37

Score: 9.79
Matched TTPs:
  • T1036.001 - Invalid Code Signature
  • T1102.002 - Bidirectional Communication
  • T1203 - Exploitation for Client Execution
  • T1189 - Drive-by Compromise
MITREへのリンク →

APT12

Score: 3.89
Matched TTPs:
  • T1102.002 - Bidirectional Communication
  • T1203 - Exploitation for Client Execution
MITREへのリンク →

Higaisa

Score: 7.48
Matched TTPs:
  • T1203 - Exploitation for Client Execution
  • T1680 - Local Storage Discovery
  • T1027.015 - Compression
MITREへのリンク →

Tropic Trooper

Score: 4.33
Matched TTPs:
  • T1203 - Exploitation for Client Execution
  • T1680 - Local Storage Discovery
MITREへのリンク →

Darkhotel

Score: 3.26
Matched TTPs:
  • T1203 - Exploitation for Client Execution
  • T1189 - Drive-by Compromise
MITREへのリンク →

Volatile Cedar

Score: 4.13
Matched TTPs:
  • T1595.003 - Wordlist Scanning
MITREへのリンク →

ToddyCat

Score: 7.64
Matched TTPs:
  • T1078.002 - Domain Accounts
  • T1680 - Local Storage Discovery
  • T1566.003 - Spearphishing via Service
MITREへのリンク →

Dark Caracal

Score: 4.29
Matched TTPs:
  • T1189 - Drive-by Compromise
  • T1566.003 - Spearphishing via Service
MITREへのリンク →

Daggerfly

Score: 5.96
Matched TTPs:
  • T1189 - Drive-by Compromise
  • T1584.004 - Server
  • T1204.001 - Malicious Link
MITREへのリンク →

Equation

Score: 4.13
Matched TTPs:
  • T1564.005 - Hidden File System
MITREへのリンク →

Strider

Score: 4.13
Matched TTPs:
  • T1564.005 - Hidden File System
MITREへのリンク →

このPulseに関連する脅威アクター (推論ベース)

Kimsuky

Score: 0.82
Matched TTPs:
  • T1584.001 - Domains
  • T1040 - Network Sniffing
  • T1657 - Financial Theft
  • T1588.005 - Exploits
  • T1566 - Phishing
  • T1598 - Phishing for Information
  • T1608.001 - Upload Malware
  • T1566.002 - Spearphishing Link
  • T1586.002 - Email Accounts
  • T1583.001 - Domains
  • T1587.001 - Malware
  • T1534 - Internal Spearphishing
  • T1588.002 - Tool
  • T1102.002 - Bidirectional Communication
  • T1596 - Search Open Technical Databases
  • T1591 - Gather Victim Org Information
  • T1593 - Search Open Websites/Domains
  • T1594 - Search Victim-Owned Websites
  • T1680 - Local Storage Discovery
  • T1598.003 - Spearphishing Link
  • T1204.001 - Malicious Link
  • T1218.010 - Regsvr32
  • T1589.002 - Email Addresses
  • T1593.001 - Social Media
MITREへのリンク →

Sandworm Team

Score: 0.73
Matched TTPs:
  • T1040 - Network Sniffing
  • T1203 - Exploitation for Client Execution
  • T1608.001 - Upload Malware
  • T1591.002 - Business Relationships
  • T1566.002 - Spearphishing Link
  • T1583.001 - Domains
  • T1587.001 - Malware
  • T1588.002 - Tool
  • T1590.001 - Domain Properties
  • T1036 - Masquerading
  • T1102.002 - Bidirectional Communication
  • T1584.005 - Botnet
  • T1593 - Search Open Websites/Domains
  • T1594 - Search Victim-Owned Websites
  • T1584.004 - Server
  • T1598.003 - Spearphishing Link
  • T1204.001 - Malicious Link
  • T1078.002 - Domain Accounts
  • T1491.002 - External Defacement
  • T1592.002 - Software
  • T1589.002 - Email Addresses
MITREへのリンク →

APT28

Score: 0.66
Matched TTPs:
  • T1584.008 - Network Devices
  • T1040 - Network Sniffing
  • T1586.002 - Email Accounts
  • T1591 - Gather Victim Org Information
  • T1210 - Exploitation of Remote Services
  • T1583.001 - Domains
  • T1669 - Wi-Fi Networks
  • T1203 - Exploitation for Client Execution
  • T1211 - Exploitation for Defense Evasion
  • T1598.003 - Spearphishing Link
  • T1204.001 - Malicious Link
  • T1189 - Drive-by Compromise
  • T1588.002 - Tool
  • T1036 - Masquerading
  • T1102.002 - Bidirectional Communication
  • T1598 - Phishing for Information
  • T1596 - Search Open Technical Databases
  • T1039 - Data from Network Shared Drive
MITREへのリンク →

Volt Typhoon

Score: 0.61
Matched TTPs:
  • T1584.008 - Network Devices
  • T1584.005 - Botnet
  • T1591 - Gather Victim Org Information
  • T1591.004 - Identify Roles
  • T1593 - Search Open Websites/Domains
  • T1594 - Search Victim-Owned Websites
  • T1680 - Local Storage Discovery
  • T1584.004 - Server
  • T1590 - Gather Victim Network Information
  • T1078.002 - Domain Accounts
  • T1596.005 - Scan Databases
  • T1588.002 - Tool
  • T1589.002 - Email Addresses
  • T1592 - Gather Victim Host Information
  • T1590.004 - Network Topology
MITREへのリンク →

Magic Hound

Score: 0.60
Matched TTPs:
  • T1584.001 - Domains
  • T1566.002 - Spearphishing Link
  • T1586.002 - Email Accounts
  • T1592.002 - Software
  • T1036.010 - Masquerade Account Name
  • T1583.001 - Domains
  • T1590.005 - IP Addresses
  • T1598.003 - Spearphishing Link
  • T1204.001 - Malicious Link
  • T1078.002 - Domain Accounts
  • T1591.001 - Determine Physical Locations
  • T1566.003 - Spearphishing via Service
  • T1189 - Drive-by Compromise
  • T1114 - Email Collection
  • T1588.002 - Tool
  • T1589.002 - Email Addresses
  • T1102.002 - Bidirectional Communication
MITREへのリンク →

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

← Pulse一覧に戻る