TAG-124
Also reported as LandUpdate808.
Reports per quarter
Techniques seen in the last two years
- T1059.001 3 reports
- T1036.005 2 reports
- T1041 2 reports
- T1053.005 2 reports
- T1059.003 2 reports
- T1059.007 2 reports
- T1070 2 reports
- T1071.001 2 reports
- T1082 2 reports
- T1083 2 reports
Show all 55 techniques Show fewer
- T1497.001 2 reports
- T1543.003 2 reports
- T1583.001 2 reports
- T1583.003 2 reports
- T1583.004 2 reports
- T1005 1 report
- T1016 1 report
- T1021.001 1 report
- T1021.002 1 report
- T1027 1 report
- T1033 1 report
- T1036 1 report
- T1048 1 report
- T1049 1 report
- T1053 1 report
- T1053.003 1 report
- T1057 1 report
- T1059 1 report
- T1068 1 report
- T1069 1 report
- T1070.004 1 report
- T1071 1 report
- T1074 1 report
- T1078 1 report
- T1095 1 report
- T1105 1 report
- T1140 1 report
- T1203 1 report
- T1204.002 1 report
- T1204.004 1 report
- T1486 1 report
- T1497 1 report
- T1518 1 report
- T1518.001 1 report
- T1543 1 report
- T1555 1 report
- T1564 1 report
- T1564.003 1 report
- T1566.002 1 report
- T1573 1 report
- T1584.001 1 report
- T1587.001 1 report
- T1608.004 1 report
- T1620 1 report
- T1659 1 report
Counts come from technique IDs in the actor's report text.
CVEs named in reports
KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.
Reports
-
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor FAKEUPDATES (Malware Family)
Show all 12 reports Show fewer
Newest first. Details opens the report in Explore.