Saint Bear
Threat actorNames and who uses them
- Saint BearOur name
- Storm-0587MITRE ATT&CK
- Lorec53Palo Alto Networks
- TA471Palo Alto Networks
- UAC-0056Palo Alto Networks
Targets
Regions: Ukraine
Source: MITRE ATT&CKKnown techniques
- T1027.002Software Packing
- T1027.013Encrypted/Encoded File
- T1059Command and Scripting Interpreter
- T1059.001PowerShell
- T1059.003Windows Command Shell
- T1059.007JavaScript
- T1112Modify Registry
- T1203Exploitation for Client Execution
- T1204.001Malicious Link
- T1204.002Malicious File
- T1497Virtualization/Sandbox Evasion
- T1553.002Code Signing
- T1566.001Spearphishing Attachment
- T1583.006Web Services
- T1589.002Email Addresses
- T1608.001Upload Malware
- T1684.001Impersonation
- T1685Disable or Modify Tools
Malware and tools used
Source: MITRE ATT&CKRecent news
No stories yet.