ATT&CK ReferencesSymantec Dragonfly Sept 2017

Symantec Dragonfly Sept 2017

Symantec Security Response. (2014, July 7). Dragonfly: Western energy sector targeted by sophisticated attack group. Retrieved September 9, 2017.

Techniques0

Not cited by any technique.

None recorded.

Technique	Used by	Procedure example
T1059.001 PowerShell	GroupDragonfly	Dragonfly has used PowerShell scripts for execution. Symantec Dragonfly Sept 2017 US-CERT TA18-074A
T1113 Screen Capture	GroupDragonfly	Dragonfly has performed screen captures of victims, including by using a tool, scr.exe (which matched the hash of ScreenUtil). Gigamon Berserk Bear October 2021 Symantec Dragonfly Sept 2017 US-CERT TA18-074A

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.