MoustachedBouncer
Also reported as Storm-1125. Linked to Belarus by four sources.
Reports per quarter
Techniques seen in the last two years
- T1005 1 report reports only
- T1016.001 1 report reports only
- T1018 1 report reports only
- T1025 1 report reports only
- T1027.013 1 report reports only
- T1036.005 1 report reports only
- T1036.008 1 report reports only
- T1041 1 report reports only
- T1046 1 report reports only
- T1048.002 1 report reports only
Show all 50 techniques Show fewer
- T1052.001 1 report reports only
- T1053.005 1 report reports only
- T1057 1 report reports only
- T1059.001 1 report in ATT&CK
- T1059.003 1 report reports only
- T1059.006 1 report reports only
- T1070.004 1 report reports only
- T1071.001 1 report reports only
- T1074.001 1 report reports only
- T1082 1 report reports only
- T1083 1 report reports only
- T1087.001 1 report reports only
- T1090.001 1 report reports only
- T1091 1 report reports only
- T1092 1 report reports only
- T1106 1 report reports only
- T1112 1 report reports only
- T1114.001 1 report reports only
- T1119 1 report reports only
- T1120 1 report reports only
- T1132.001 1 report reports only
- T1135 1 report reports only
- T1204.002 1 report reports only
- T1210 1 report reports only
- T1518 1 report reports only
- T1543.003 1 report reports only
- T1547.001 1 report reports only
- T1552.001 1 report reports only
- T1552.004 1 report reports only
- T1560.002 1 report reports only
- T1564.001 1 report reports only
- T1567.002 1 report reports only
- T1569.002 1 report reports only
- T1572 1 report reports only
- T1583.003 1 report reports only
- T1583.004 1 report reports only
- T1584.006 1 report reports only
- T1585.003 1 report reports only
- T1587.001 1 report reports only
- T1588.002 1 report reports only
Counts come from technique IDs in the actor's report text. “Reports only” means reports name the technique but MITRE ATT&CK® does not list it for this actor.
Also listed by ATT&CK
CVEs named in reports
- CVE-2021-1732 KEV ransomware
- CVE-2022-27926 KEV
KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.
Reports
Newest first. Details opens the report in Explore.