3am

Noticias

• UK school estate hit by 3AM ransomware in suspected AI-assisted attackBleepingComputer · 3 nov 2026

Técnicas MITRE ATT&CK

Ejecución

• T1569.002 Service Execution 39 reglas Sigma

Persistencia

• T1136 Create Account 18 reglas Sigma
• T1543.003 Windows Service 40 reglas Sigma

Escalada de privilegios

• T1548.002 Bypass User Account Control 40 reglas Sigma

Descubrimiento

• T1018 Remote System Discovery 9 reglas Sigma
• T1135 Network Share Discovery 6 reglas Sigma
• T1615 Group Policy Discovery 4 reglas Sigma

Exfiltración

• T1048 Exfiltration Over Alternative Protocol 17 reglas Sigma

Impacto

• T1486 Data Encrypted for Impact 14 reglas Sigma
• T1490 Inhibit System Recovery 26 reglas Sigma

Stealth

• T1070.001 Clear Windows Event Logs
• T1562.004 Disable or Modify System Firewall