Risk Letters

Threat actor

Everest

TLP:CLEAR

Facts

  • Motivation: Financial
  • Malware and tools: AnyDesk, Atera, Cobalt Strike, Metasploit, Meterpreter, ProcDump, SoftPerfect NetScan, Splashtop
  • Techniques (MITRE ATT&CK): Obfuscated Files or Information, Obfuscated Files or Information: Dynamic API Resolution, Valid Accounts: Local Accounts, Modify Registry, Deobfuscate/Decode Files or Information, Execution Guardrails, Hide Artifacts, Debugger Evasion, Remote System Discovery, Network Share Discovery, Software Discovery: Security Software Discovery, System Location Discovery: System Language Discovery

Members get the actor's profile, its recent incidents and our assessment in the dashboard.

Get the full brief

Data: NVD (public domain), CISA KEV, FIRST EPSS, MITRE ATT&CK, AlienVault OTX.