Trusted Design

Intrusions Affecting Multiple Victims Across Multiple Sectors

概要

The National Cybersecurity and Communications Integration Center (NCCIC) has become aware of an emerging sophisticated campaign, occurring since at least May 2016, that use multiple malware implants. Initial victims have been identified in several sectors including Information Technology, Energy, Healthcare, Communications, and Critical Manufacturing. According to preliminary analysis, threat actors appear to be leveraging stolen administrative credentials (local and domain) and certificates along with placing sophisticated malware implants on critical systems. Some of the campaign victims have been IT service providers where credential compromises could potentially be leveraged to access customer environments. Depending on the defensive mitigations in place, the threat actor could possibly gain full access to networks and data in a way that appears legitimate to existing monitoring tools.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• TA17-117A: Intrusions Affecting Multiple Victims Across Multiple Sectors (score: 0.96)
• TA17-117A Intrusions Affecting Multiple Victims Across Multiple Sectors (score: 0.92)
• Fidelis Threat Advisory #1017: Phishing in Plain Sight (score: 0.64)
• Blurring of Commodity and Targeted Attack Malware (score: 0.62)
• Hawkeye Keylogger – Reborn v8: An in-depth campaign analysis (score: 0.61)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る