APT10
STONE PANDAMenupass TeamhappyyongziPOTASSIUMRed ApolloCVNXHOGFISHCloud HopperBRONZE RIVERSIDEATK41G0045Granite TaurusTA429CicadaPurple TyphoonmenuPass
menuPass is a threat group that has been active since at least 2006. Individual members of menuPass are known to have acted in association with the Chinese Ministry of State Security's (MSS) Tianjin State Security Bureau and worked for the Huaying Haitai Science and Technology Development Company. Fuente: MISP
País atribuido: CN según MISP
Actividad en Jábega · 12 semanas
1 noticias · vista por primera vez el 23 oct 2026 · la última, el 23 oct 2026
Noticias
- PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai MalwareThe Hacker News · 23 oct 2026
Aparece junto a
Técnicas MITRE ATT&CK
Preparación de recursos
Acceso inicial
T1078Valid Accounts 82 reglas SigmaT1190Exploit Public-Facing Application 40 reglas SigmaT1199Trusted Relationship 1 reglas SigmaT1566.001Spearphishing Attachment 21 reglas Sigma
Ejecución
T1047Windows Management Instrumentation 40 reglas SigmaT1053.005Scheduled Task 40 reglas SigmaT1059.001PowerShell 40 reglas SigmaT1059.003Windows Command Shell 40 reglas SigmaT1106Native API 12 reglas SigmaT1204.002Malicious File 32 reglas SigmaT1574.001DLL 40 reglas Sigma
Escalada de privilegios
Acceso a credenciales
T1003.002Security Account Manager 26 reglas SigmaT1003.003NTDS 23 reglas SigmaT1003.004LSA Secrets 12 reglas SigmaT1056.001Keylogging 3 reglas Sigma
Descubrimiento
T1016System Network Configuration Discovery 4 reglas SigmaT1018Remote System Discovery 9 reglas SigmaT1046Network Service Discovery 17 reglas SigmaT1049System Network Connections Discovery 2 reglas SigmaT1083File and Directory Discovery 17 reglas SigmaT1087.002Domain Account 19 reglas Sigma
Movimiento lateral
T1021.001Remote Desktop Protocol 16 reglas SigmaT1021.004SSH 5 reglas SigmaT1210Exploitation of Remote Services 14 reglas Sigma
Recopilación
T1005Data from Local System 12 reglas SigmaT1039Data from Network Shared Drive 2 reglas SigmaT1074.001Local Data Staging 4 reglas SigmaT1074.002Remote Data StagingT1119Automated Collection 5 reglas SigmaT1560Archive Collected Data 11 reglas SigmaT1560.001Archive via Utility 10 reglas Sigma
Mando y control
T1090.002External Proxy 2 reglas SigmaT1105Ingress Tool Transfer 40 reglas SigmaT1568.001Fast Flux DNS
Stealth
T1027.013Encrypted/Encoded FileT1036Masquerading 88 reglas SigmaT1036.003Rename Legitimate Utilities 25 reglas SigmaT1036.005Match Legitimate Resource Name or Location 20 reglas SigmaT1070.003Clear Command History 9 reglas SigmaT1070.004File Deletion 9 reglas SigmaT1140Deobfuscate/Decode Files or Information 17 reglas SigmaT1218.004InstallUtil
Defense impairment
Relaciones por coaparición en noticias, no atribución. Fuentes: MISP galaxy, MITRE ATT&CK y SigmaHQ. attack.mitre.org ↗