Mustard Tempest

Names and who uses them

• Mustard TempestOur name
• DEV-0206Microsoft
• GOLD PRELUDESecureworks
• TA569Secureworks
• UNC1543Secureworks

Known techniques

• T1036.005Match Legitimate Resource Name or Location
• T1082System Information Discovery
• T1105Ingress Tool Transfer
• T1189Drive-by Compromise
• T1204.001Malicious Link
• T1566.002Spearphishing Link
• T1583.004Server
• T1583.008Malvertising
• T1584.001Domains
• T1608.001Upload Malware
• T1608.004Drive-by Target
• T1608.006SEO Poisoning

Malware and tools used