Real-world descriptions of how a group, tool or campaign used a technique.
53 examples
| Technique | Used by | Procedure example |
|---|---|---|
| T1553.002 Code Signing |
ToolCSPY Downloader | CSPY Downloader has come signed with revoked certificates. |
| T1553.002 Code Signing |
ToolQuasarRAT | A QuasarRAT .dll file is digitally signed by a certificate from AirVPN. |
| T1553.002 Code Signing |
MalwareZeroCleare | ZeroCleare can deploy a vulnerable, signed driver on a compromised host to bypass operating system safeguards. |
Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.