Reports, blog posts and papers that MITRE cites as evidence.
3865 references
| Citation | Description |
|---|---|
| Kaspersky Adwind Feb 2016 | Kamluk, V. & Gostev, A. (2016, February). Adwind - A Cross-Platform RAT. Retrieved April 23, 2019. |
| Kaspersky Andariel Ransomware June 2021 | Park, S. (2021, June 15). Andariel evolves to target South Korea with ransomware. Retrieved September 29, 2021. |
| Kaspersky Autofill | Golubev, S. (n.d.). How malware steals autofill data from browsers. Retrieved March 28, 2023. |
| Kaspersky BlindEagle AUG 2024 | Global Research & Analysis Team, Kaspersky. (2024, August 19). BlindEagle flying high in Latin America. Retrieved April 16, 2026. |
| Kaspersky CactusPete Aug 2020 | Zykov, K. (2020, August 13). CactusPete APT group’s updated Bisonal backdoor. Retrieved May 5, 2021. |
| Kaspersky Carbanak | Kaspersky Lab's Global Research and Analysis Team. (2015, February). CARBANAK APT THE GREAT BANK ROBBERY. Retrieved August 23, 2018. |
| Kaspersky Careto | Kaspersky Labs. (2014, February 11). Unveiling “Careto” - The Masked APT. Retrieved July 5, 2017. |
| Kaspersky Cloud Atlas August 2019 | GReAT. (2019, August 12). Recent Cloud Atlas activity. Retrieved May 8, 2020. |
| Kaspersky Cloud Atlas December 2014 | GReAT. (2014, December 10). Cloud Atlas: RedOctober APT is back in style. Retrieved May 8, 2020. |
| Kaspersky Darkhotel | Kaspersky Lab's Global Research and Analysis Team. (2014, November). The Darkhotel APT A Story of Unusual Hospitality. Retrieved November 12, 2014. |
| Kaspersky Dridex May 2017 | Slepogin, N. (2017, May 25). Dridex: A History of Evolution. Retrieved May 31, 2019. |
| Kaspersky Dtrack | Kaspersky Global Research and Analysis Team. (2019, September 23). DTrack: previously unknown spy-tool by Lazarus hits financial institutions and research centers. Retrieved January 20, 2021. |
| Kaspersky Duqu 2.0 | Kaspersky Lab. (2015, June 11). The Duqu 2.0. Retrieved April 21, 2017. |
| Kaspersky Emotet Jan 2019 | Shulmin, A. . (2015, April 9). The Banking Trojan Emotet: Detailed Analysis. Retrieved March 25, 2019. |
| Kaspersky Encyclopedia MiTM | Kaspersky IT Encyclopedia. (n.d.). Man-in-the-middle attack. Retrieved September 1, 2023. |
| Kaspersky Equation QA | Kaspersky Lab's Global Research and Analysis Team. (2015, February). Equation Group: Questions and Answers. Retrieved December 21, 2015. |
| Kaspersky Ferocious Kitten Jun 2021 | GReAT. (2021, June 16). Ferocious Kitten: 6 Years of Covert Surveillance in Iran. Retrieved September 22, 2021. |
| Kaspersky Flame | Gostev, A. (2012, May 28). The Flame: Questions and Answers. Retrieved March 1, 2017. |
| Kaspersky Flame Functionality | Gostev, A. (2012, May 30). Flame: Bunny, Frog, Munch and BeetleJuice…. Retrieved March 1, 2017. |
| Kaspersky Gauss Whitepaper | Kaspersky Lab. (2012, August). Gauss: Abnormal Distribution. Retrieved January 17, 2019. |
| Kaspersky IAmTheKing October 2020 | Ivan Kwiatkowski, Pierre Delcher, Felix Aime. (2020, October 15). IAmTheKing and the SlothfulMedia malware family. Retrieved October 15, 2020. |
| Kaspersky LODEINFO OCT 2022 | Ishimaru, S. (2022, October 31). APT10: Tracking down LODEINFO 2022, part I. Retrieved April 17, 2026. |
| Kaspersky LODEINFO Part II OCT 2022 | Ishimaru, S. (2022, October 31). APT10: Tracking down LODEINFO 2022, part II. Retrieved April 17, 2026. |
| Kaspersky Lab SynAck May 2018 | Bettencourt, J. (2018, May 7). Kaspersky Lab finds new variant of SynAck ransomware using sophisticated Doppelgänging technique. Retrieved May 24, 2018. |
| Kaspersky Lamberts Toolkit April 2017 | GREAT. (2017, April 11). Unraveling the Lamberts Toolkit. Retrieved March 21, 2022. |
| Kaspersky Lazarus Under The Hood APR 2017 | GReAT. (2017, April 3). Lazarus Under the Hood. Retrieved October 3, 2018. |
| Kaspersky Lazarus Under The Hood Blog 2017 | GReAT. (2017, April 3). Lazarus Under the Hood. Retrieved April 17, 2019. |
| Kaspersky Lua | Global Research and Analysis Team. (2016, August 9). The ProjectSauron APT. Retrieved August 5, 2024. |
| Kaspersky LuminousMoth July 2021 | Lechtik, M, and etl. (2021, July 14). LuminousMoth APT: Sweeping attacks for the chosen few. Retrieved October 20, 2022. |
| Kaspersky Lyceum October 2021 | Kayal, A. et al. (2021, October). LYCEUM REBORN: COUNTERINTELLIGENCE IN THE MIDDLE EAST. Retrieved June 14, 2022. |
| Kaspersky MSSQL Aug 2019 | Plakhov, A., Sitchikhin, D. (2019, August 22). Agent 1433: remote attack on Microsoft SQL Server. Retrieved September 4, 2019. |
| Kaspersky ManOnTheSide | Starikova, A. (2023, February 14). Man-on-the-side – peculiar attack. Retrieved September 1, 2023. |
| Kaspersky MoleRATs April 2019 | GReAT. (2019, April 10). Gaza Cybergang Group1, operation SneakyPastes. Retrieved May 13, 2020. |
| Kaspersky NetTraveler | Kaspersky Lab's Global Research and Analysis Team. (n.d.). The NetTraveler (aka ‘Travnet’). Retrieved November 17, 2024. |
| Kaspersky Poseidon Group | Kaspersky Lab's Global Research and Analysis Team. (2016, February 9). Poseidon Group: a Targeted Attack Boutique specializing in global cyber-espionage. Retrieved March 16, 2016. |
| Kaspersky ProjectSauron Blog | Kaspersky Lab's Global Research & Analysis Team. (2016, August 8). ProjectSauron: top level cyber-espionage platform covertly extracts encrypted government comms. Retrieved August 17, 2016. |
| Kaspersky ProjectSauron Full Report | Kaspersky Lab's Global Research & Analysis Team. (2016, August 9). The ProjectSauron APT. Retrieved August 17, 2016. |
| Kaspersky ProjectSauron Technical Analysis | Kaspersky Lab's Global Research & Analysis Team. (2016, August 9). The ProjectSauron APT. Technical Analysis. Retrieved August 17, 2016. |
| Kaspersky QakBot September 2021 | Kuzmenko, A. et al. (2021, September 2). QakBot technical analysis. Retrieved September 27, 2021. |
| Kaspersky RTLO Cyber Crime | Firsh, A.. (2018, February 13). Zero-day vulnerability in Telegram - Cybercriminals exploited Telegram flaw to launch multipurpose attacks. Retrieved April 22, 2019. |
| Kaspersky Regin | Kaspersky Lab's Global Research and Analysis Team. (2014, November 24). THE REGIN PLATFORM NATION-STATE OWNAGE OF GSM NETWORKS. Retrieved December 1, 2014. |
| Kaspersky ShadowPad Aug 2017 | Kaspersky Lab. (2017, August). ShadowPad: popular server management software hit in supply chain attack. Retrieved March 22, 2021. |
| Kaspersky ShrinkLocker 2024 | Cristian Souza, Eduardo Ovalle, Ashley Muñoz, & Christopher Zachor. (2024, May 23). ShrinkLocker: Turning BitLocker into ransomware. Retrieved December 7, 2024. |
| Kaspersky Sodin July 2019 | Mamedov, O, et al. (2019, July 3). Sodin ransomware exploits Windows vulnerability and processor architecture. Retrieved August 4, 2020. |
| Kaspersky Sofacy | Kaspersky Lab's Global Research and Analysis Team. (2015, December 4). Sofacy APT hits high profile targets with updated toolset. Retrieved December 10, 2015. |
| Kaspersky StoneDrill 2017 | Kaspersky Lab. (2017, March 7). From Shamoon to StoneDrill: Wipers attacking Saudi organizations and beyond. Retrieved March 14, 2019. |
| Kaspersky Superfish | Onuma. (2015, February 24). Superfish: Adware Preinstalled on Lenovo Laptops. Retrieved February 20, 2017. |
| Kaspersky TajMahal April 2019 | GReAT. (2019, April 10). Project TajMahal – a sophisticated new APT framework. Retrieved October 14, 2019. |
| Kaspersky ThreatNeedle Feb 2021 | Vyacheslav Kopeytsev and Seongsu Park. (2021, February 25). Lazarus targets defense industry with ThreatNeedle. Retrieved October 27, 2021. |
| Kaspersky ToddyCat Check Logs October 2023 | Dedola, G. et al. (2023, October 12). ToddyCat: Keep calm and check logs. Retrieved January 3, 2024. |
Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.
