HAZY TIGER
BitterT-APT-17APT-C-08Orange YaliTA397
The Bitter threat group initially started using RAT tools in their campaigns, as the first Bitter versions, for Android released in 2014 were based on the AndroRAT framework. Over time, they switched to a custom version that has been known as BitterRAT ever since. Fuente: MISP
País atribuido: IN según MISP
Actividad en Jábega · 12 semanas
1 noticias · vista por primera vez el 9 nov 2026 · la última, el 9 nov 2026
Noticias
- Bitter Hackers Deploy New PapRAT Backdoor in Cyberespionage Campaign Targeting South AsiaThe Hacker News · 9 nov 2026
Técnicas MITRE ATT&CK
Preparación de recursos
Acceso inicial
Ejecución
T1053.005Scheduled Task 40 reglas SigmaT1203Exploitation for Client Execution 31 reglas SigmaT1204.002Malicious File 32 reglas SigmaT1559.002Dynamic Data Exchange 1 reglas Sigma
Escalada de privilegios
Mando y control
T1071.001Web Protocols 39 reglas SigmaT1095Non-Application Layer Protocol 3 reglas SigmaT1105Ingress Tool Transfer 40 reglas SigmaT1568Dynamic Resolution 4 reglas SigmaT1573Encrypted Channel 5 reglas Sigma
Stealth
Relaciones por coaparición en noticias, no atribución. Fuentes: MISP galaxy, MITRE ATT&CK y SigmaHQ. attack.mitre.org ↗