Reports, blog posts and papers that MITRE cites as evidence.
3865 references
| Citation | Description |
|---|---|
| Cisco Blog Legacy Device Attacks | Omar Santos. (2020, October 19). Attackers Continue to Target Legacy Devices. Retrieved October 20, 2020. |
| Cisco CaddyWiper March 2022 | Malhotra, A. (2022, March 15). Threat Advisory: CaddyWiper. Retrieved March 23, 2022. |
| Cisco DNSMessenger March 2017 | Brumaghin, E. and Grady, C.. (2017, March 2). Covert Channels and Poor Decisions: The Tale of DNSMessenger. Retrieved March 8, 2017. |
| Cisco Group 72 | Esler, J., Lee, M., and Williams, C. (2014, October 14). Threat Spotlight: Group 72. Retrieved January 14, 2016. |
| Cisco H1N1 Part 1 | Reynolds, J.. (2016, September 13). H1N1: Technical analysis reveals new capabilities. Retrieved September 26, 2016. |
| Cisco H1N1 Part 2 | Reynolds, J.. (2016, September 14). H1N1: Technical analysis reveals new capabilities – part 2. Retrieved November 17, 2024. |
| Cisco IOS Forensics Developments | Felix 'FX' Lindner. (2008, February). Developments in Cisco IOS Forensics. Retrieved October 21, 2020. |
| Cisco IOS Shellcode | George Nosenko. (2015). CISCO IOS SHELLCODE: ALL-IN-ONE. Retrieved October 21, 2020. |
| Cisco IOS Software Integrity Assurance - Command History | Cisco. (n.d.). Cisco IOS Software Integrity Assurance - Command History. Retrieved October 21, 2020. |
| Cisco LotusBlossom 2025 | Joey Chen, Cisco Talos. (2025, February 27). Lotus Blossom espionage group targets multiple industries with different versions of Sagerunex and hacking tools. Retrieved March 15, 2025. |
| Cisco MagicRAT 2022 | Asheer Malhotra, Vitor Ventura & Jungsoo An, Cisco Talos. (2022, September 7). MagicRAT: Lazarus’ latest gateway into victim networks. Retrieved December 30, 2024. |
| Cisco Operation Layover September 2021 | Ventura, V. (2021, September 16). Operation Layover: How we tracked an attack on the aviation industry to five years of compromise. Retrieved September 15, 2023. |
| Cisco Salt Typhoon FEB 2025 | Cisco Talos. (2025, February 20). Weathering the storm: In the midst of a Typhoon. Retrieved February 24, 2025. |
| Cisco Synful Knock Evolution | Graham Holmes. (2015, October 8). Evolution of attacks on Cisco IOS devices. Retrieved October 19, 2020. |
| Cisco Talos Avos Jun 2022 | Venere, G. Neal, C. (2022, June 21). Avos ransomware group expands with new attack arsenal. Retrieved January 11, 2023. |
| Cisco Talos Bitter Bangladesh May 2022 | Raghuprasad, C . (2022, May 11). Bitter APT adds Bangladesh to their targets. Retrieved June 1, 2022. |
| Cisco Talos Blog | Jaeson Schultz, Darin Smith. (2022, April 21). TeamTNT Targeting AWS, Alibaba. Retrieved June 15, 2025. |
| Cisco Talos Intelligence Group | Darin Smith. (2022, April 21). TeamTNT targeting AWS, Alibaba. Retrieved August 4, 2022. |
| Cisco Talos MUSTANG PANDA PLUGX PUBLOAD MAY 2022 | Asheer Malhotra, Jungsoo An, Kendall Mc. (2022, May 5). Mustang Panda deploys a new wave of malware targeting Europe. Retrieved August 4, 2025. |
| Cisco Talos Qilin Ransomware OCT 2025 | Takeda, T. et al. (2025, October 26). Uncovering Qilin attack methods exposed through multiple cases. Retrieved March 26, 2026. |
| Cisco Talos Transparent Tribe Education Campaign July 2022 | N. Baisini. (2022, July 13). Transparent Tribe begins targeting education sector in latest campaign. Retrieved September 22, 2022. |
| Cisco Traffic Mirroring | Cisco. (n.d.). Cisco IOS XR Interface and Hardware Component Configuration Guide for the Cisco CRS Router, Release 5.1.x. Retrieved October 19, 2020. |
| Cisco Ukraine Wipers January 2022 | Biasini, N. et al.. (2022, January 21). Ukraine Campaign Delivers Defacement and Wipers, in Continued Escalation. Retrieved March 14, 2022. |
| Cisco Umbrella DGA | Scarfo, A. (2016, October 10). Domain Generation Algorithms – Why so effective?. Retrieved February 18, 2019. |
| CiscoAngler | Nick Biasini. (2015, March 3). Threat Spotlight: Angler Lurking in the Domain Shadows. Retrieved March 6, 2017. |
| Citizen Lab Group5 | Scott-Railton, J., et al. (2016, August 2). Group5: Syria and the Iranian Connection. Retrieved September 26, 2016. |
| Citizen Lab Stealth Falcon May 2016 | Marczak, B. and Scott-Railton, J.. (2016, May 29). Keep Calm and (Don’t) Enable Macros: A New Threat Actor Targets UAE Dissidents. Retrieved June 8, 2016. |
| CitizenLab KeyBoy Nov 2016 | Hulcoop, A., et al. (2016, November 17). It’s Parliamentary KeyBoy and the targeting of the Tibetan Community. Retrieved June 13, 2019. |
| CitizenLab Tropic Trooper Aug 2018 | Alexander, G., et al. (2018, August 8). Familiar Feeling: A Malware Campaign Targeting the Tibetan Diaspora Resurfaces. Retrieved June 17, 2019. |
| Citizenlab Packrat 2015 | Scott-Railton, J., et al. (2015, December 8). Packrat. Retrieved December 18, 2020. |
| Ciubotariu 2014 | Ciubotariu, M. (2014, January 23). Trojan.Zeroaccess.C Hidden in NTFS EA. Retrieved December 2, 2014. |
| ClearSky Charming Kitten Dec 2017 | ClearSky Cyber Security. (2017, December). Charming Kitten. Retrieved December 27, 2017. |
| ClearSky CopyKittens March 2017 | ClearSky Cyber Security. (2017, March 30). Jerusalem Post and other Israeli websites compromised by Iranian threat agent CopyKitten. Retrieved August 21, 2017. |
| ClearSky Kittens Back 3 August 2020 | ClearSky Research Team. (2020, August 1). The Kittens Are Back in Town 3 - Charming Kitten Campaign Evolved and Deploying Spear-Phishing link by WhatsApp. Retrieved April 21, 2021. |
| ClearSky Lazarus Aug 2020 | ClearSky Research Team. (2020, August 13). Operation 'Dream Job' Widespread North Korean Espionage Campaign. Retrieved December 20, 2021. |
| ClearSky Lebanese Cedar Jan 2021 | ClearSky Cyber Security. (2021, January). “Lebanese Cedar” APT Global Lebanese Espionage Campaign Leveraging Web Servers. Retrieved February 10, 2021. |
| ClearSky MuddyWater June 2019 | ClearSky. (2019, June). Iranian APT group ‘MuddyWater’ Adds Exploits to Their Arsenal. Retrieved May 14, 2020. |
| ClearSky MuddyWater Nov 2018 | ClearSky Cyber Security. (2018, November). MuddyWater Operations in Lebanon and Oman: Using an Israeli compromised domain for a two-stage campaign. Retrieved November 29, 2018. |
| ClearSky OilRig Jan 2017 | ClearSky Cybersecurity. (2017, January 5). Iranian Threat Agent OilRig Delivers Digitally Signed Malware, Impersonates University of Oxford. Retrieved May 3, 2017. |
| ClearSky Pay2Kitten December 2020 | ClearSky. (2020, December 17). Pay2Key Ransomware – A New Campaign by Fox Kitten. Retrieved December 21, 2020. |
| ClearSky Siamesekitten August 2021 | ClearSky Cyber Security . (2021, August). New Iranian Espionage Campaign By “Siamesekitten” - Lyceum. Retrieved June 6, 2022. |
| ClearSky Wilted Tulip July 2017 | ClearSky Cyber Security and Trend Micro. (2017, July). Operation Wilted Tulip: Exposing a cyber espionage apparatus. Retrieved August 21, 2017. |
| ClearSky and Trend Micro Operation Wilted Tulip July 2017 | ClearSky and Trend Micro. (2017, July). Operation Wilted Tulip - Exposing a cyber espionage apparatus. Retrieved May 17, 2021. |
| ClearkSky Fox Kitten February 2020 | ClearSky. (2020, February 16). Fox Kitten – Widespread Iranian Espionage-Offensive Campaign. Retrieved December 21, 2020. |
| Clockwork SSH Agent Hijacking | Beuchler, B. (2012, September 28). SSH Agent Hijacking. Retrieved November 17, 2024. |
| Cloud Hack Tricks GWS Apps Script | HackTricks Cloud. (n.d.). GWS - App Scripts. Retrieved July 1, 2024. |
| CloudSEK ESXiArgs 2023 | Mehardeep Singh Sawhney. (2023, February 9). Analysis of Files Used in ESXiArgs Ransomware Attack Against VMware ESXi Servers. Retrieved March 26, 2025. |
| CloudSEK Lumma Stealer 2024 | CloudSEK TRIAD. (2024, September 19). Unmasking the Danger: Lumma Stealer Malware Exploits Fake CAPTCHA Pages. Retrieved March 18, 2025. |
| CloudSEK_RustyWater_Jan2026 | Awasthi, P. (2026, January 8). Reborn in Rust: Muddy Water Evolves Tooling with RustyWater Implant. Retrieved March 19, 2026. |
| CloudSploit - Unused AWS Regions | CloudSploit. (2019, June 8). The Danger of Unused AWS Regions. Retrieved October 8, 2019. |
Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.
