Куда я попал?
APT17
APT17 is a China-based threat group that has conducted network intrusions against U.S. government entities, the defense industry, law firms, information technology companies, mining companies, and non-government organizations. (Citation: FireEye APT17)
ID: G0025
Associated Groups: Deputy Dog
Version: 1.1
Created: 31 May 2017
Last Modified: 13 Oct 2020
Associated Group Descriptions |
|
| Name | Description |
|---|---|
| Deputy Dog | (Citation: FireEye APT17) |
Techniques Used |
||||
| Domain | ID | Name | Use | |
|---|---|---|---|---|
| Enterprise | T1583 | .006 | Acquire Infrastructure: Web Services |
APT17 has created profile pages in Microsoft TechNet that were used as C2 infrastructure.(Citation: FireEye APT17) |
Software |
|||
| ID | Name | References | Techniques |
|---|---|---|---|
| S0069 | BLACKCOFFEE | (Citation: FireEye APT17) (Citation: FireEye Periscope March 2018) | File and Directory Discovery, Multi-Stage Channels, Windows Command Shell, Process Discovery, Dead Drop Resolver, File Deletion, Bidirectional Communication |
Мы используем cookie-файлы, чтобы получить статистику, которая помогает нам улучшить сервис для вас с целью персонализации сервисов и предложений. Вы может прочитать подробнее о cookie-файлах или изменить настройки браузера. Продолжая пользоваться сайтом, вы даёте согласие на использование ваших cookie-файлов и соглашаетесь с Политикой обработки персональных данных.