ATT&CK ReferencesFireEye Outlook Dec 2019

FireEye Outlook Dec 2019

McWhirt, M., Carr, N., Bienstock, D. (2019, December 4). Breaking the Rules: A Tough Outlook for Home Page Attacks (CVE-2017-11774). Retrieved June 23, 2020.

Open the source

Techniques1

T1480Execution Guardrails

Groups0

None recorded.

Software0

None recorded.

Campaigns0

None recorded.

Procedure examples1

Technique	Used by	Procedure example
T1137.004 Outlook Home Page	GroupOilRig	OilRig has abused the Outlook Home Page feature for persistence. OilRig has also used CVE-2017-11774 to roll back the initial patch designed to protect against Home Page abuse. FireEye Outlook Dec 2019

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.