Reports, blog posts and papers that MITRE cites as evidence.
3865 references
| Citation | Description |
|---|---|
| Symantec Crambus OCT 2023 | Symantec Threat Hunter Team. (2023, October 19). Crambus: New Campaign Targets Middle Eastern Government. Retrieved November 27, 2024. |
| Symantec DDoS October 2014 | Wueest, C.. (2014, October 21). The continued rise of DDoS attacks. Retrieved April 24, 2019. |
| Symantec Daggerfly 2023 | Threat Hunter Team. (2023, April 20). Daggerfly: APT Actor Targets Telecoms Company in Africa. Retrieved July 25, 2024. |
| Symantec Daggerfly 2024 | Threat Hunter Team. (2024, July 23). Daggerfly: Espionage Group Makes Major Update to Toolset. Retrieved July 25, 2024. |
| Symantec Darkmoon Aug 2005 | Hayashi, K. (2005, August 18). Backdoor.Darkmoon. Retrieved February 23, 2018. |
| Symantec Digital Certificates | Shinotsuka, H. (2013, February 22). How Attackers Steal Private Keys from Digital Certificates. Retrieved March 31, 2016. |
| Symantec Dragonfly | Symantec Security Response. (2014, June 30). Dragonfly: Cyberespionage Attacks Against Energy Suppliers. Retrieved April 8, 2016. |
| Symantec Dragonfly 2.0 October 2017 | Symantec. (2017, October 7). Dragonfly: Western energy sector targeted by sophisticated attack group. Retrieved April 19, 2022. |
| Symantec Dragonfly Sept 2017 | Symantec Security Response. (2014, July 7). Dragonfly: Western energy sector targeted by sophisticated attack group. Retrieved September 9, 2017. |
| Symantec Dyre June 2015 | Symantec Security Response. (2015, June 23). Dyre: Emerging threat on financial fraud landscape. Retrieved August 23, 2018. |
| Symantec Elderwood Sept 2012 | O'Gorman, G., and McDonald, G.. (2012, September 6). The Elderwood Project. Retrieved November 17, 2024. |
| Symantec Elfin Mar 2019 | Security Response attack Investigation Team. (2019, March 27). Elfin: Relentless Espionage Group Targets Multiple Organizations in Saudi Arabia and U.S.. Retrieved April 10, 2019. |
| Symantec Emotet Jul 2018 | Symantec. (2018, July 18). The Evolution of Emotet: From Banking Trojan to Threat Distributor. Retrieved March 25, 2019. |
| Symantec FIN8 Jul 2023 | Symantec Threat Hunter Team. (2023, July 18). FIN8 Uses Revamped Sardonic Backdoor to Deliver Noberus Ransomware. Retrieved August 9, 2023. |
| Symantec Frutas Feb 2013 | Bingham, J. (2013, February 11). Cross-Platform Frutas RAT Builder and Back Door. Retrieved April 23, 2019. |
| Symantec Gallmaker Oct 2018 | Symantec Security Response. (2018, October 10). Gallmaker: New Attack Group Eschews Malware to Live off the Land. Retrieved November 27, 2018. |
| Symantec Hydraq Jan 2010 | Lelli, A. (2010, January 11). Trojan.Hydraq. Retrieved February 20, 2018. |
| Symantec Hydraq Persistence Jan 2010 | Fitzgerald, P. (2010, January 26). How Trojan.Hydraq Stays On Your Computer. Retrieved February 22, 2018. |
| Symantec Inception Framework March 2018 | Symantec. (2018, March 14). Inception Framework: Alive and Well, and Hiding Behind Proxies. Retrieved May 8, 2020. |
| Symantec Leafminer July 2018 | Symantec Security Response. (2018, July 25). Leafminer: New Espionage Campaigns Targeting Middle Eastern Regions. Retrieved August 28, 2018. |
| Symantec Linfo May 2012 | Zhou, R. (2012, May 15). Backdoor.Linfo. Retrieved February 23, 2018. |
| Symantec Living off the Land | Wueest, C., Anand, H. (2017, July). Living off the land and fileless attack techniques. Retrieved April 10, 2018. |
| Symantec MuddyWater Dec 2018 | Symantec DeepSight Adversary Intelligence Team. (2018, December 10). Seedworm: Group Compromises Government Agencies, Oil & Gas, NGOs, Telecoms, and IT Firms. Retrieved December 14, 2018. |
| Symantec Naid June 2012 | Neville, A. (2012, June 15). Trojan.Naid. Retrieved February 22, 2018. |
| Symantec Nerex May 2012 | Ladley, F. (2012, May 15). Backdoor.Nerex. Retrieved February 23, 2018. |
| Symantec Orangeworm April 2018 | Symantec Security Response Attack Investigation Team. (2018, April 23). New Orangeworm attack group targets the healthcare sector in the U.S., Europe, and Asia. Retrieved May 8, 2018. |
| Symantec Orangeworm IOCs April 2018 | Symantec Security Response Attack Investigation Team. (2018, April 23). Orangeworm: Indicators of Compromise. Retrieved July 8, 2018. |
| Symantec Palmerworm Sep 2020 | Threat Intelligence. (2020, September 29). Palmerworm: Espionage Gang Targets the Media, Finance, and Other Sectors. Retrieved March 25, 2022. |
| Symantec Pasam May 2012 | Mullaney, C. & Honda, H. (2012, May 4). Trojan.Pasam. Retrieved February 22, 2018. |
| Symantec Patchwork | Hamada, J.. (2016, July 25). Patchwork cyberespionage group expands targets from governments to wide range of industries. Retrieved August 17, 2016. |
| Symantec Play Ransomware 2023 | Symantec Threat Hunter Team. (2023, April 19). Play Ransomware Group Using New Custom Data-Gathering Tools. Retrieved May 22, 2025. |
| Symantec RAINDROP January 2021 | Symantec Threat Hunter Team. (2021, January 18). Raindrop: New Malware Discovered in SolarWinds Investigation. Retrieved January 19, 2021. |
| Symantec Remsec IOCs | Symantec Security Response. (2016, August 8). Backdoor.Remsec indicators of compromise. Retrieved August 17, 2016. |
| Symantec Ristol May 2012 | Ladley, F. (2012, May 15). Backdoor.Ritsol. Retrieved February 23, 2018. |
| Symantec SamSam Oct 2018 | Symantec Security Response Attack Investigation Team. (2018, October 30). SamSam: Targeted Ransomware Attacks Continue. Retrieved April 16, 2019. |
| Symantec Seaduke 2015 | Symantec Security Response. (2015, July 13). “Forkmeiamfamous”: Seaduke, latest weapon in the Duke armory. Retrieved July 22, 2015. |
| Symantec Security Center Trojan.Kwampirs | Moench, B. and Aboud, E. (2016, August 23). Trojan.Kwampirs. Retrieved May 10, 2018. |
| Symantec Shamoon 2012 | Symantec. (2012, August 16). The Shamoon Attacks. Retrieved March 14, 2019. |
| Symantec Shuckworm January 2022 | Symantec. (2022, January 31). Shuckworm Continues Cyber-Espionage Attacks Against Ukraine. Retrieved February 17, 2022. |
| Symantec Sowbug Nov 2017 | Symantec Security Response. (2017, November 7). Sowbug: Cyber espionage group targets South American and Southeast Asian governments. Retrieved November 16, 2017. |
| Symantec Strider Blog | Symantec Security Response. (2016, August 7). Strider: Cyberespionage group turns eye of Sauron on targets. Retrieved August 17, 2016. |
| Symantec Suckfly March 2016 | DiMaggio, J. (2016, March 15). Suckfly: Revealing the secret life of your code signing certificates. Retrieved August 3, 2016. |
| Symantec Suckfly May 2016 | DiMaggio, J. (2016, May 17). Indian organizations targeted in Suckfly attacks. Retrieved August 3, 2016. |
| Symantec Sunburst Sending Data January 2021 | Symantec Threat Hunter Team. (2021, January 22). SolarWinds: How Sunburst Sends Data Back to the Attackers. Retrieved January 22, 2021. |
| Symantec Thrip June 2018 | Security Response Attack Investigation Team. (2018, June 19). Thrip: Espionage Group Hits Satellite, Telecoms, and Defense Companies. Retrieved July 10, 2018. |
| Symantec Tick Apr 2016 | DiMaggio, J. (2016, April 28). Tick cyberespionage group zeros in on Japan. Retrieved July 16, 2018. |
| Symantec Tortoiseshell 2019 | Symantec Threat Hunter Team. (2019, September 18). Tortoiseshell Group Targets IT Providers in Saudi Arabia in Probable Supply Chain Attacks. Retrieved May 20, 2024. |
| Symantec Trojan.Hydraq Jan 2010 | Symantec Security Response. (2010, January 18). The Trojan.Hydraq Incident. Retrieved February 20, 2018. |
| Symantec Troll Stealer 2024 | Symantec Threat Hunter Team. (2024, May 16). Springtail: New Linux Backdoor Added to Toolkit. Retrieved January 17, 2025. |
| Symantec Ukraine Wipers February 2022 | Symantec Threat Hunter Team. (2022, February 24). Ukraine: Disk-wiping Attacks Precede Russian Invasion. Retrieved March 25, 2022. |
Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.
