ATT&CKReferencesPalo Alto Latrodectus Activity June 2024

Palo Alto Latrodectus Activity June 2024

Unit 42. (2024, June 25). 2024-06-25-IOCs-from-Latrodectus-activity. Retrieved September 13, 2024.

Open the source

Techniques0

Not cited by any technique.

Groups0

None recorded.

Software0

None recorded.

Campaigns0

None recorded.

Procedure examples3

TechniqueUsed byProcedure example
T1021.005
VNC
MalwareLatrodectus

Latrodectus has routed C2 traffic using Keyhole VNC.

T1059.007
JavaScript
MalwareLatrodectus

Latrodectus has used JavaScript files as part its infection chain during malicious spam
email campaigns.

T1102
Web Service
MalwareLatrodectus

Latrodectus has used Google Firebase to download malicious installation scripts.

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.