BlackTech
Threat actorAttributed to China by MITRE ATT&CK (source). An attribution, not a proven fact.
Names and who uses them
- BlackTechOur name
- PalmerwormSymantec
Targets
Regions: East Asia, United States, Taiwan, Japan, Hong Kong
Source: MITRE ATT&CKKnown techniques
- T1021.004SSH
- T1036.002Right-to-Left Override
- T1046Network Service Discovery
- T1106Native API
- T1190Exploit Public-Facing Application
- T1203Exploitation for Client Execution
- T1204.001Malicious Link
- T1204.002Malicious File
- T1566.001Spearphishing Attachment
- T1566.002Spearphishing Link
- T1574.001DLL
- T1588.002Tool
- T1588.003Code Signing Certificates
- T1588.004Digital Certificates
Malware and tools used
Source: MITRE ATT&CKRecent news
No stories yet.