Axiom
Threat actorAttributed to China by MITRE ATT&CK (source). An attribution, not a proven fact.
Names and who uses them
- AxiomOur name
- Group 72MITRE ATT&CK
Targets
Sectors: Government, Defence, Manufacturing, Media, Aerospace
Source: MITRE ATT&CKKnown techniques
- T1001.002Steganography
- T1003OS Credential Dumping
- T1005Data from Local System
- T1021.001Remote Desktop Protocol
- T1078Valid Accounts
- T1189Drive-by Compromise
- T1190Exploit Public-Facing Application
- T1203Exploitation for Client Execution
- T1546.008Accessibility Features
- T1553Subvert Trust Controls
- T1560Archive Collected Data
- T1563.002RDP Hijacking
- T1566Phishing
- T1583.002DNS Server
- T1583.003Virtual Private Server
- T1584.005Botnet
Malware and tools used
Source: MITRE ATT&CKRecent news
No stories yet.