Reports, blog posts and papers that MITRE cites as evidence.
3865 references
| Citation | Description |
|---|---|
| ESET LightNeuron May 2019 | Faou, M. (2019, May). Turla LightNeuron: One email away from remote code execution. Retrieved June 24, 2019. |
| ESET LoJax Sept 2018 | ESET. (2018, September). LOJAX First UEFI rootkit found in the wild, courtesy of the Sednit group. Retrieved July 2, 2019. |
| ESET LoudMiner June 2019 | Malik, M. (2019, June 20). LoudMiner: Cross-platform mining in cracked VST software. Retrieved May 18, 2020. |
| ESET Machete July 2019 | ESET. (2019, July). MACHETE JUST GOT SHARPER Venezuelan government institutions under attack. Retrieved September 13, 2019. |
| ESET MirrorFace 2025 | Dominik Breitenbacher. (2025, March 18). Operation AkaiRyū: MirrorFace invites Europe to Expo 2025 and revives ANEL backdoor. Retrieved May 22, 2025. |
| ESET MirrorFace DEC 2022 | Breitenbacher, D. (2022, December 14). Unmasking MirrorFace: Operation LiberalFace targeting Japanese political entities. Retrieved April 17, 2026. |
| ESET MoustachedBouncer | Faou, M. (2023, August 10). MoustachedBouncer: Espionage against foreign diplomats in Belarus. Retrieved September 1, 2023. |
| ESET Nomadic Octopus 2018 | Cherepanov, A. (2018, October 4). Nomadic Octopus Cyber espionage in Central Asia. Retrieved October 13, 2021. |
| ESET OceanLotus | Foltýn, T. (2018, March 13). OceanLotus ships new backdoor using old tricks. Retrieved May 22, 2018. |
| ESET OceanLotus Mar 2019 | Dumont, R. (2019, March 20). Fake or Fake: Keeping up with OceanLotus decoys. Retrieved April 1, 2019. |
| ESET OceanLotus macOS April 2019 | Dumont, R.. (2019, April 9). OceanLotus: macOS malware update. Retrieved April 15, 2019. |
| ESET OilRig Campaigns Sep 2023 | Hromcova, Z. and Burgher, A. (2023, September 21). OilRig’s Outer Space and Juicy Mix: Same ol’ rig, new drill pipes. Retrieved November 21, 2024. |
| ESET OilRig Downloaders DEC 2023 | Hromcova, Z. and Burgher, A. (2023, December 14). OilRig’s persistent attacks using cloud service-powered downloaders. Retrieved November 26, 2024. |
| ESET Okrum July 2019 | Hromcova, Z. (2019, July). OKRUM AND KETRICAN: AN OVERVIEW OF RECENT KE3CHANG GROUP ACTIVITY. Retrieved May 6, 2020. |
| ESET Operation Groundbait | Cherepanov, A.. (2016, May 17). Operation Groundbait: Analysis of a surveillance toolkit. Retrieved May 18, 2016. |
| ESET Operation Spalax Jan 2021 | M. Porolli. (2021, January 21). Operation Spalax: Targeted malware attacks in Colombia. Retrieved September 16, 2022. |
| ESET PLEAD Malware July 2018 | Cherepanov, A.. (2018, July 9). Certificates stolen from Taiwanese tech‑companies misused in Plead malware campaign. Retrieved May 6, 2020. |
| ESET PipeMon May 2020 | Tartare, M. et al. (2020, May 21). No “Game over” for the Winnti Group. Retrieved August 24, 2020. |
| ESET PowerPool Code October 2020 | ESET Research. (2020, October 1). ESET Research Tweet Linking Slothfulmedia and PowerPool. Retrieved September 12, 2024. |
| ESET RTM Feb 2017 | Faou, M. and Boutin, J. (2017, February). Read The Manual: A Guide to the RTM Banking Trojan. Retrieved March 9, 2017. |
| ESET Recon Snake Nest | Boutin, J. and Faou, M. (2018). Visiting the snake nest. Retrieved May 7, 2019. |
| ESET RedLine Stealer November 2024 | Alexandre Cote Cyr. (2024, November 8). Life on a crooked RedLine: Analyzing the infamous infostealer’s backend. Retrieved September 17, 2025. |
| ESET Security Mispadu Facebook Ads 2019 | ESET Security. (2019, November 19). Mispadu: Advertisement for a discounted Unhappy Meal. Retrieved March 13, 2024. |
| ESET Sednit 2017 Activity | ESET. (2017, December 21). Sednit update: How Fancy Bear Spent the Year. Retrieved February 18, 2019. |
| ESET Sednit July 2015 | ESET Research. (2015, July 10). Sednit APT Group Meets Hacking Team. Retrieved March 1, 2017. |
| ESET Sednit Part 1 | ESET. (2016, October). En Route with Sednit - Part 1: Approaching the Target. Retrieved November 8, 2016. |
| ESET Sednit Part 2 | ESET. (2016, October). En Route with Sednit - Part 2: Observing the Comings and Goings. Retrieved November 21, 2016. |
| ESET Sednit Part 3 | ESET. (2016, October). En Route with Sednit - Part 3: A Mysterious Downloader. Retrieved November 21, 2016. |
| ESET Sednit USBStealer 2014 | Calvet, J. (2014, November 11). Sednit Espionage Group Attacking Air-Gapped Networks. Retrieved January 4, 2017. |
| ESET Stuxnet Under the Microscope | Matrosov, A., Rodionov, E., Harley, D., Malcho, J.. (n.d.). Stuxnet Under the Microscope. Retrieved December 7, 2020. |
| ESET T3 Threat Report 2021 | ESET. (2022, February). THREAT REPORT T3 2021. Retrieved February 10, 2022. |
| ESET TeleBots Oct 2018 | Cherepanov, A., Lipovsky, R. (2018, October 11). New TeleBots backdoor: First evidence linking Industroyer to NotPetya. Retrieved November 27, 2018. |
| ESET Telebots Dec 2016 | Cherepanov, A.. (2016, December 13). The rise of TeleBots: Analyzing disruptive KillDisk attacks. Retrieved June 10, 2020. |
| ESET Telebots July 2017 | Cherepanov, A.. (2017, July 4). Analysis of TeleBots’ cunning backdoor . Retrieved June 11, 2020. |
| ESET Telebots June 2017 | Cherepanov, A.. (2017, June 30). TeleBots are back: Supply chain attacks against Ukraine. Retrieved June 11, 2020. |
| ESET ToolShell JUL 2025 | ESET Research. (2025, July 24). ToolShell: An all-you-can-eat buffet for threat actors. Retrieved October 15, 2025. |
| ESET Trickbot Oct 2020 | Boutin, J. (2020, October 12). ESET takes part in global operation to disrupt Trickbot. Retrieved March 15, 2021. |
| ESET Turla Lunar toolset May 2024 | Jurčacko, F. (2024, May 15). To the Moon and back(doors): Lunar landing in diplomatic missions. Retrieved June 26, 2024. |
| ESET Turla Mosquito Jan 2018 | ESET, et al. (2018, January). Diplomats in Eastern Europe bitten by a Turla mosquito. Retrieved July 3, 2018. |
| ESET Turla Mosquito May 2018 | ESET Research. (2018, May 22). Turla Mosquito: A shift towards more generic tools. Retrieved July 3, 2018. |
| ESET Turla PowerShell May 2019 | Faou, M. and Dumont R.. (2019, May 29). A dive into Turla PowerShell usage. Retrieved June 14, 2019. |
| ESET Twitter Ida Pro Nov 2021 | Cherepanov, Anton. (2019, November 10). ESETresearch discovered a trojanized IDA Pro installer. Retrieved September 12, 2024. |
| ESET Windigo Mar 2014 | Bilodeau, O., Bureau, M., Calvet, J., Dorais-Joncas, A., Léveillé, M., Vanheuverzwijn, B. (2014, March 18). Operation Windigo – the vivisection of a large Linux server‑side credential‑stealing malware campaign. Retrieved February 10, 2021. |
| ESET WinterVivern 2023 | Matthieu Faou. (2023, October 25). Winter Vivern exploits zero-day vulnerability in Roundcube Webmail servers. Retrieved July 29, 2024. |
| ESET Zebrocy May 2019 | ESET Research. (2019, May 22). A journey to Zebrocy land. Retrieved June 20, 2019. |
| ESET Zebrocy Nov 2018 | ESET. (2018, November 20). Sednit: What’s going on with Zebrocy?. Retrieved February 12, 2019. |
| ESET_MuddyWater_Dec2025 | ESET Research. (2025, December 2). MuddyWater: Snakes by the riverbank. Retrieved February 17, 2026. |
| EST Kimsuky April 2019 | Alyac. (2019, April 3). Kimsuky Organization Steals Operation Stealth Power. Retrieved August 13, 2019. |
| EST Kimsuky SmokeScreen April 2019 | ESTSecurity. (2019, April 17). Analysis of the APT Campaign ‘Smoke Screen’ targeting to Korea and US 출처: https://blog.alyac.co.kr/2243 [이스트시큐리티 알약 블로그]. Retrieved September 29, 2021. |
| ETW Palantir | Palantir. (2018, December 24). Tampering with Windows Event Tracing: Background, Offense, and Defense. Retrieved April 15, 2026. |
Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.
