Threat Intelligence. (2020, September 29). Palmerworm: Espionage Gang Targets the Media, Finance, and Other Sectors. Retrieved March 25, 2022.
Not cited by any technique.
None recorded.
None recorded.
| Technique | Used by | Procedure example |
|---|---|---|
| T1021.004 SSH |
GroupBlackTech | BlackTech has used Putty for remote access. |
| T1046 Network Service Discovery |
GroupBlackTech | BlackTech has used the SNScan tool to find other potential targets on victim networks. |
| T1588.002 Tool |
GroupBlackTech | BlackTech has obtained and used tools such as Putty, SNScan, and PsExec for its operations. |
| T1588.003 Code Signing Certificates |
GroupBlackTech | BlackTech has used stolen code-signing certificates for its malicious payloads. |
Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.
