Reports, blog posts and papers that MITRE cites as evidence.
3865 references
| Citation | Description |
|---|---|
| CrowdStrike IceApple May 2022 | CrowdStrike. (2022, May). ICEAPPLE: A NOVEL INTERNET INFORMATION SERVICES (IIS) POST-EXPLOITATION FRAMEWORK. Retrieved June 27, 2022. |
| CrowdStrike Linux Rootkit | Kurtz, G. (2012, November 19). HTTP iframe Injecting Linux Rootkit. Retrieved December 21, 2017. |
| CrowdStrike PIONEER KITTEN August 2020 | Orleans, A. (2020, August 31). Who Is PIONEER KITTEN?. Retrieved December 21, 2020. |
| CrowdStrike Putter Panda | Crowdstrike Global Intelligence Team. (2014, June 9). CrowdStrike Intelligence Report: Putter Panda. Retrieved January 22, 2016. |
| CrowdStrike Ryuk January 2019 | Hanel, A. (2019, January 10). Big Game Hunting with Ryuk: Another Lucrative Targeted Ransomware. Retrieved May 12, 2020. |
| CrowdStrike SUNSPOT Implant January 2021 | CrowdStrike Intelligence Team. (2021, January 11). SUNSPOT: An Implant in the Build Process. Retrieved January 11, 2021. |
| CrowdStrike Scattered Spider BYOVD January 2023 | CrowdStrike. (2023, January 10). SCATTERED SPIDER Exploits Windows Security Deficiencies with Bring-Your-Own-Vulnerable-Driver Tactic in Attempt to Bypass Endpoint Security. Retrieved July 5, 2023. |
| CrowdStrike Scattered Spider JUL 2025 | Counter Adversary Operations. (2025, July 2). CrowdStrike Services Observes SCATTERED SPIDER Escalate Attacks Across Industries. Retrieved October 13, 2025. |
| CrowdStrike Scattered Spider Profile | CrowdStrike. (n.d.). Scattered Spider. Retrieved July 5, 2023. |
| CrowdStrike Silent Chollima Adversary September 2021 | CrowdStrike. (2021, September 29). Silent Chollima Adversary Profile. Retrieved September 29, 2021. |
| CrowdStrike StellarParticle January 2022 | CrowdStrike. (2022, January 27). Early Bird Catches the Wormhole: Observations from the StellarParticle Campaign. Retrieved February 7, 2022. |
| CrowdStrike VENOMOUS BEAR | Meyers, A. (2018, March 12). Meet CrowdStrike’s Adversary of the Month for March: VENOMOUS BEAR. Retrieved May 16, 2018. |
| CrowdStrike VOODOO BEAR | Meyers, A. (2018, January 19). Meet CrowdStrike’s Adversary of the Month for January: VOODOO BEAR. Retrieved May 22, 2018. |
| CrowdStrike Wizard Spider October 2020 | Podlosky, A., Hanel, A. et al. (2020, October 16). WIZARD SPIDER Update: Resilient, Reactive and Resolute. Retrieved June 15, 2021. |
| CrowdStrike downgrade attack | Falcon Complete Team. (2021, May 11). Response When Minutes Matter: Rising Up Against Ransomware. Retrieved April 15, 2026. |
| Crowdstrike AWS User Federation Persistence | Vaishnav Murthy and Joel Eng. (2023, January 30). How Adversaries Can Persist with AWS User Federation. Retrieved March 10, 2023. |
| Crowdstrike BEC | Bart Lenaerts-Bergmans. (2023, August 8). What is Business Email Compromise?. Retrieved April 15, 2026. |
| Crowdstrike CrowdCast Oct 2013 | Crowdstrike. (2013, October 16). CrowdCasts Monthly: You Have an Adversary Problem. Retrieved November 17, 2024. |
| Crowdstrike DNC June 2016 | Alperovitch, D.. (2016, June 15). Bears in the Midst: Intrusion into the Democratic National Committee. Retrieved August 3, 2016. |
| Crowdstrike DNS Hijack 2019 | Matt Dahl. (2019, January 25). Widespread DNS Hijacking Activity Targets Multiple Sectors. Retrieved February 14, 2022. |
| Crowdstrike DriveSlayer February 2022 | Thomas, W. et al. (2022, February 25). CrowdStrike Falcon Protects from New Wiper Malware Used in Ukraine Cyberattacks. Retrieved March 25, 2022. |
| Crowdstrike EvilCorp March 2021 | Podlosky, A., Feeley, B. (2021, March 17). INDRIK SPIDER Supersedes WastedLocker with Hades Ransomware to Circumvent OFAC Sanctions. Retrieved September 15, 2021. |
| Crowdstrike GTR2020 Mar 2020 | Crowdstrike. (2020, March 2). 2020 Global Threat Report. Retrieved December 11, 2020. |
| Crowdstrike Global Threat Report Feb 2018 | CrowdStrike. (2018, February 26). CrowdStrike 2018 Global Threat Report. Retrieved October 10, 2018. |
| Crowdstrike Helix Kitten Nov 2018 | Meyers, A. (2018, November 27). Meet CrowdStrike’s Adversary of the Month for November: HELIX KITTEN. Retrieved December 18, 2018. |
| Crowdstrike Hiding in Plain Sight 2018 | Crowdstrike. (2018, July 18). Hiding in Plain Sight: Using the Office 365 Activities API to Investigate Business Email Compromises. Retrieved January 19, 2020. |
| Crowdstrike HuntReport 2022 | CrowdStrike. (2023). 2022 Falcon OverWatch Threat Hunting Report. Retrieved May 20, 2024. |
| Crowdstrike Hypervisor Jackpotting Pt 2 2021 | Michael Dawson. (2021, August 30). Hypervisor Jackpotting, Part 2: eCrime Actors Increase Targeting of ESXi Servers with Ransomware. Retrieved March 26, 2025. |
| Crowdstrike Indrik November 2018 | Frankoff, S., Hartley, B. (2018, November 14). Big Game Hunting: The Evolution of INDRIK SPIDER From Dridex Wire Fraud to BitPaymer Targeted Ransomware. Retrieved January 6, 2021. |
| Crowdstrike Kubernetes Container Escape | Manoj Ahuje. (2022, January 31). CVE-2022-0185: Kubernetes Container Escape Using Linux Kernel Exploit. Retrieved July 6, 2022. |
| Crowdstrike MUSTANG PANDA June 2018 | Meyers, A. (2018, June 15). Meet CrowdStrike’s Adversary of the Month for June: MUSTANG PANDA. Retrieved April 12, 2021. |
| Crowdstrike Qakbot October 2020 | CS. (2020, October 7). Duck Hunting with Falcon Complete: A Fowl Banking Trojan Evolves, Part 2. Retrieved September 27, 2021. |
| Crowdstrike TELCO BPO Campaign December 2022 | Parisi, T. (2022, December 2). Not a SIMulation: CrowdStrike Investigations Reveal Intrusion Campaign Targeting Telco and BPO Companies. Retrieved June 30, 2023. |
| Crowdstrike WhisperGate January 2022 | Crowdstrike. (2022, January 19). Technical Analysis of the WhisperGate Malicious Bootloader. Retrieved March 10, 2022. |
| Crowdstrike-leaks | Crowdstrike. (2020, September 24). Double Trouble: Ransomware with Data Leak Extortion, Part 1. Retrieved December 6, 2023. |
| Crowdstrike_CarbonSpider_Part2_Nov2024 | Loui, E., Reynolds, J. (2021, November 4). CARBON SPIDER Embraces Big Game Hunting, Part 2. Retrieved May 7, 2025. |
| CrySyS Blog TeamSpy | CrySyS Lab. (2013, March 20). TeamSpy – Obshie manevri. Ispolzovat’ tolko s razreshenija S-a. Retrieved April 11, 2018. |
| Crysys Skywiper | sKyWIper Analysis Team. (2012, May 31). sKyWIper (a.k.a. Flame a.k.a. Flamer): A complex malware for targeted attacks. Retrieved September 6, 2018. |
| Crytox Ransomware | Romain Dumont . (2022, September 21). Technical Analysis of Crytox Ransomware. Retrieved November 22, 2023. |
| Cyber Forensicator Silence Jan 2019 | Skulkin, O.. (2019, January 20). Silence: Dissecting Malicious CHM Files and Performing Forensic Analysis. Retrieved November 17, 2024. |
| Cyber Security News | Kaaviya. (n.d.). SuperBlack Actors Exploiting Two Fortinet Vulnerabilities to Deploy Ransomware. Retrieved September 22, 2025. |
| CyberArk Labs Discord | CyberArk Labs. (2023, April 13). The (Not so) Secret War on Discord. Retrieved July 20, 2023. |
| CyberArk Labs Safe Mode 2016 | Naim, D.. (2016, September 15). CyberArk Labs: From Safe Mode to Domain Compromise. Retrieved June 23, 2021. |
| CyberBit Dtrack | Hod Gavriel. (2019, November 21). Dtrack: In-depth analysis of APT on a nuclear power plant. Retrieved January 20, 2021. |
| CyberBit Early Bird Apr 2018 | Gavriel, H. & Erbesfeld, B. (2018, April 11). New ‘Early Bird’ Code Injection Technique Discovered. Retrieved May 24, 2018. |
| CyberBit System Calls | Gavriel, H. (2018, November 27). Malware Mitigation when Direct System Calls are Used. Retrieved September 29, 2021. |
| CyberCX Akira Ransomware | CyberCX. (2023, September 15). Weaponising VMs to bypass EDR – Akira ransomware. Retrieved April 4, 2025. |
| CyberCX SaaS Domain Hijacking 2025 | Tony Mau. (2025, May 29). Keys to the (SaaS) kingdom. Retrieved May 30, 2025. |
| CyberESI GTALK | CyberESI. (2011). TROJAN.GTALK. Retrieved September 12, 2024. |
| CyberScoop Babuk February 2021 | Lyngaas, S. (2021, February 4). Meet Babuk, a ransomware attacker blamed for the Serco breach. Retrieved August 11, 2021. |
Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.
