Monday 2 November
Global

Your region, kept on this device.

CopyKittens

Threat actor

Attributed to Iran by MITRE ATT&CK (source). An attribution, not a proven fact.

Targets

Regions: Israel, Saudi Arabia, Germany

Source: MITRE ATT&CK

Known techniques

  • T1059.001PowerShell
  • T1090Proxy
  • T1218.011Rundll32
  • T1553.002Code Signing
  • T1560.001Archive via Utility
  • T1560.003Archive via Custom Method
  • T1564.003Hidden Window
  • T1588.002Tool
Source: MITRE ATT&CK

Malware and tools used

Source: MITRE ATT&CK

Recent news

No stories yet.