フィルター

Threat profiles.

Explore the latest threat group definitions and profiles published by the

Sophos® Counter Threat Unit™ (CTU) Research Team.!

表示中 51-60 / 181 プロファイル

名前	場所	目的	別名	ツール
COBALT FOXGLOVE	Iran	Espionage	Fox Kitten (ClearSky), Lemon Sandstorm (Microsoft), Parisite (Dragos), Pioneer Kitten (Crowdstrike), RUBIDIUM (MIcrosoft), UNC757 (Mandiant)	Chisel, FRP (Fast Reverse Proxy), Mimikatz, n3tw0rm ransomware, ngrok, pay2key ransomware, POWSSHNET, Servo, STSRCheck
COBALT GYPSY	Iran	Espionage	APT34 (FireEye), CHRYSENE (Dragos), Crambus (Symantec), EUROPIUM (Microsoft), Hazel Sandstorm (Microsoft), Helix Kitten (CrowdStrike), ITG13 (IBM), OilRig (ClearSky), Yellow Maero (PwC)	Glimpse, Helminth, Jason, MacDownloader, PoisonFrog, RGDoor, ThreeDollars, TinyZbot, Toxocara, Trichuris, TwoFace
COBALT HICKMAN	Iran	Espionage	APT39 (FireEye), Burgundy Sandstorm (Microsoft), Chafer (Symantec), ITG07 (IBM), Remix Kitten (Crowdstrike)	MechaFlounder, Mimikatz, Remexi, TREKX
COBALT ILLUSION	Iran	Espionage, Surveillance	Agent Serpens (Palo Alto), APT35 (Mandiant), APT42 (Mandiant), Charming Kitten (CrowdStrike), CharmingCypress (Volexity), Educated Manticore (Checkpoint), ITG18 (IBM), Magic Hound (Palo Alto), Mint Sandstorm sub-group (Microsoft), NewsBeef (Kaspersky), Newscaster (iSight), PHOSPHORUS sub-group (Microsoft), TA453 (Proofpoint), UNC788 (Mandiant), Yellow Garuda (PwC)	Browser Exploitation Framework (BeEF), MagicHound Toolset, PupyRAT
COBALT JUNO	Iran	Espionage	APT-C-38 (QiAnXin), SABER LION, TG-2884 (SCWX CTU)	HARDCANDY, SABER1, SABER2, ZooPark
COBALT KATANA	Iran	Espionage	Hive0081 (IBM), SectorD01 (NHSC), xHunt campaign (Palo Alto)	CASHY200, Diezen, Eye, Gon, Hisoka, Hisoka Netero, HyphenShell, Killua, Sakabota, Sakabota Framework
COBALT LYCEUM	Iran	Espionage	DEV-0133 (Microsoft), HEXANE (Dragos), ScorchedEpoch (Crowdstrike)	DanBot, MilanRAT, RGDoor, SharkWork RAT
COBALT MIRAGE	Iran	Disruption, Espionage, Financial Gain	DEV-0270 (Microsoft), Nemesis Kitten (Crowdstrike), PHOSPHORUS (Microsoft), TunnelVision (SentinelOne), UNC2448 (Mandiant)	BitLocker, Custom powershell scripts, DiskCryptor, Drokbk, Fast Reverse Proxy (FRP), FRPC, Impacket wmiexec, Ngrok, Plink, PowerLessCLR, TunnelFish
COBALT MYSTIQUE	Iran	Data Theft, Disruption, Espionage	Banished Kitten (Crowdstrike), DEV-0842 (Microsoft), Druidfly (Symantec), Handala Hack Team, Homeland Justice, Karmabelow80, Red Sandstorm (Microsoft), Storm-0842 (Microsoft), Void Manticore (Checkpoint)	AllinOneNeo, Bibi, GramPy, GramPyLoader
COBALT OBELISK	Iran	Disruption, Influence Operations	ChaoticOrchestra (Crowdstrike), Cotton Sandstorm (Microsoft), Haywire Kitten (Crowdstrike), Marnanbridge (Google), MarnanBridge (Google)

…

…