PLATINUM
Also reported as TwoForOne, ATK33, Platinum, ATK 33, Fallow Squall and 3 other names. Sources disagree on the origin.
Reports per quarter
Techniques in ATT&CK
Listed by ATT&CK
No report from the last two years names a technique ID.
CVEs named in reports
- CVE-2013-1331 KEV
- CVE-2013-7331 KEV
- CVE-2015-0057
- CVE-2015-1701 KEV ransomware
- CVE-2015-2545 KEV
- CVE-2015-2546 KEV ransomware
- CVE-2018-8453 KEV ransomware
- CVE-2025-55182 KEV ransomware
- CVE-2025-66478
KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.
Reports
-
Threat Group Cards: A Threat Actor Encyclopedia
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Threat Group Cards: A Threat Actor Encyclopedia
-
Persistent parasite in EOL Magento 2 stores wakes at Black Friday
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Persistent parasite in EOL Magento 2 stores wakes at Black Friday
-
BlackRock - The Trojan That Wanted to Get Them All
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor BlackRock - The Trojan That Wanted to Get Them All
-
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor ASEC_REPORT_vol.97_ENG
-
Titanium_ the Platinum group strikes again
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Titanium_ the Platinum group strikes again
-
CDS2018-Technical-S1-v2 Hunting for Platinum v2_clean
The original link failed its last check. Original publisher Detailsfor CDS2018-Technical-S1-v2 Hunting for Platinum v2_clean
Show all 22 reports Show fewer
-
Parasite HTTP RAT cooks up a stew of stealthy tricks
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Parasite HTTP RAT cooks up a stew of stealthy tricks
-
PLATINUM continues to evolve, find ways to maintain invisibility
The link to Mirror on Box failed its last check. Mirror on Box Detailsfor PLATINUM continues to evolve, find ways to maintain invisibility
-
CVE-2015-2545: overview of current threats - Securelist
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor CVE-2015-2545: overview of current threats - Securelist
-
CVE-2015-2545: overview of current threats
The link to Mirror on Box failed its last check. Mirror on Box Detailsfor CVE-2015-2545: overview of current threats
-
CVE-2015-2545- overview of current threats
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor CVE-2015-2545- overview of current threats
-
Exploring CVE-2015-2545 and its users
The link to Mirror on Box failed its last check. Mirror on Box Detailsfor Exploring CVE-2015-2545 and its users
-
Exploring CVE-2015-2545 and its users - Cyber security updates
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Exploring CVE-2015-2545 and its users - Cyber security updates
-
Platinum feature article - Targeted attacks in South and Southeast Asia April 2016
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Platinum feature article - Targeted attacks in South and Southeast Asia April 2016
-
Microsoft Word - FireEye_letterhead_v1.docx
The original link failed its last check. Original publisher Detailsfor Microsoft Word - FireEye_letterhead_v1.docx
Newest first. Details opens the report in Explore.