Monday 2 November
Global

Your region, kept on this device.

Ajax Security Team

Threat actor

Names and who uses them

  • Ajax Security TeamOur name
  • Operation Woolen-GoldfishCheck Point
  • Rocket KittenCheck Point
  • Flying KittenCrowdStrike
  • AjaxTMMandiant
  • Operation Saffron RoseMandiant

Targets

Sectors: Defence

Regions: United States

Source: MITRE ATT&CK

Known techniques

  • T1056.001Keylogging
  • T1105Ingress Tool Transfer
  • T1204.002Malicious File
  • T1555.003Credentials from Web Browsers
  • T1566.001Spearphishing Attachment
  • T1566.003Spearphishing via Service
Source: MITRE ATT&CK

Malware and tools used

Source: MITRE ATT&CK

Recent news

No stories yet.