Trusselsaktør

Everest

TLP:CLEAR

Motiv: Økonomisk
Malware og værktøjer: AnyDesk, Atera, Cobalt Strike, Metasploit, Meterpreter, ProcDump, SoftPerfect NetScan, Splashtop
Teknikker (MITRE ATT&CK): Obfuscated Files or Information, Obfuscated Files or Information: Dynamic API Resolution, Valid Accounts: Local Accounts, Modify Registry, Deobfuscate/Decode Files or Information, Execution Guardrails, Hide Artifacts, Debugger Evasion, Remote System Discovery, Network Share Discovery, Software Discovery: Security Software Discovery, System Location Discovery: System Language Discovery

Medlemmer får aktørens profil, de seneste hændelser og vores vurdering i dashboardet.

Data: NVD (public domain), CISA KEV, FIRST EPSS, MITRE ATT&CK, AlienVault OTX.