Windshift
Threat actorNames and who uses them
- WindshiftOur name
- BahamutMITRE ATT&CK
Targets
Sectors: Government, Critical infrastructure
Regions: Middle East
Source: MITRE ATT&CKKnown techniques
- T1027Obfuscated Files or Information
- T1033System Owner/User Discovery
- T1036Masquerading
- T1036.001Invalid Code Signature
- T1047Windows Management Instrumentation
- T1057Process Discovery
- T1059.005Visual Basic
- T1071.001Web Protocols
- T1082System Information Discovery
- T1105Ingress Tool Transfer
- T1189Drive-by Compromise
- T1204.001Malicious Link
- T1204.002Malicious File
- T1518Software Discovery
- T1518.001Security Software Discovery
- T1547.001Registry Run Keys / Startup Folder
- T1566.001Spearphishing Attachment
- T1566.002Spearphishing Link
- T1566.003Spearphishing via Service
Malware and tools used
Source: MITRE ATT&CKRecent news
No stories yet.