DarkHotel
DUBNIUMFallout TeamKarbaLuderNemimNeminTapaouxPioneerShadow CraneAPT-C-06SIG25TUNGSTEN BRIDGET-APT-02G0012ATK52Zigzag Hail
Kaspersky described DarkHotel in a 2014 report as: '... DarkHotel drives its campaigns by spear-phishing targets with highly advanced Flash zero-day exploits that effectively evade the latest Windows and Adobe defenses, and yet they also imprecisely spread among large numbers of vague targets with peer-to-peer spreading tactics. Moreover, this crews most unusual characteristic is that for… Fuente: MISP
País atribuido: KR según MISP
Actividad en Jábega · 12 semanas
1 noticias · vista por primera vez el 10 nov 2026 · la última, el 10 nov 2026
Noticias
- Software Transparency Is Changing: Allan Friedman on SBOM, AI BOMs and What Comes NextSecurityWeek · 10 nov 2026
Técnicas MITRE ATT&CK
Acceso inicial
T1091Replication Through Removable MediaT1189Drive-by Compromise 3 reglas SigmaT1566.001Spearphishing Attachment 21 reglas Sigma
Ejecución
T1059.003Windows Command Shell 40 reglas SigmaT1203Exploitation for Client Execution 31 reglas SigmaT1204.002Malicious File 32 reglas Sigma
Persistencia
Acceso a credenciales
Descubrimiento
T1016System Network Configuration Discovery 4 reglas SigmaT1057Process Discovery 3 reglas SigmaT1082System Information Discovery 18 reglas SigmaT1083File and Directory Discovery 17 reglas SigmaT1124System Time Discovery 1 reglas SigmaT1497Virtualization/Sandbox Evasion 3 reglas SigmaT1497.001System Checks 3 reglas SigmaT1497.002User Activity Based ChecksT1518.001Security Software Discovery 5 reglas Sigma
Movimiento lateral
Mando y control
Stealth
T1027.013Encrypted/Encoded FileT1036.005Match Legitimate Resource Name or Location 20 reglas SigmaT1140Deobfuscate/Decode Files or Information 17 reglas Sigma
Defense impairment
Relaciones por coaparición en noticias, no atribución. Fuentes: MISP galaxy, MITRE ATT&CK y SigmaHQ. attack.mitre.org ↗