ATT&CK ReferencesESET PLEAD Malware July 2018

ESET PLEAD Malware July 2018

Cherepanov, A.. (2018, July 9). Certificates stolen from Taiwanese tech‑companies misused in Plead malware campaign. Retrieved May 6, 2020.

Techniques0

Not cited by any technique.

None recorded.

None recorded.

None recorded.

Technique	Used by	Procedure example
T1001.001 Junk Data	MalwarePLEAD	PLEAD samples were found to be highly obfuscated with junk code. ESET PLEAD Malware July 2018 TrendMicro BlackTech June 2017
T1555 Credentials from Password Stores	MalwarePLEAD	PLEAD has the ability to steal saved passwords from Microsoft Outlook. ESET PLEAD Malware July 2018
T1555.003 Credentials from Web Browsers	MalwarePLEAD	PLEAD can harvest saved credentials from browsers such as Google Chrome, Microsoft Internet Explorer, and Mozilla Firefox. ESET PLEAD Malware July 2018 TrendMicro BlackTech June 2017
T1588.004 Digital Certificates	GroupBlackTech	BlackTech has used valid, stolen digital certificates for some of their malware and tools. ESET PLEAD Malware July 2018

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.