Monday 2 November
Global

Your region, kept on this device.

Winnti Group

Threat actor

Names and who uses them

  • Winnti GroupOur name
  • BlackflySymantec

Known techniques

  • T1014Rootkit
  • T1057Process Discovery
  • T1083File and Directory Discovery
  • T1105Ingress Tool Transfer
  • T1553.002Code Signing
  • T1583.001Domains
Source: MITRE ATT&CK

Malware and tools used

Source: MITRE ATT&CK

Recent news

No stories yet.