Reports, blog posts and papers that MITRE cites as evidence.
3865 references
| Citation | Description |
|---|---|
| Talos Frankenstein June 2019 | Adamitis, D. et al. (2019, June 4). It's alive: Threat actors cobble together open-source pieces into monstrous Frankenstein campaign. Retrieved May 11, 2020. |
| Talos GravityRAT | Mercer, W., Rascagneres, P. (2018, April 26). GravityRAT - The Two-Year Evolution Of An APT Targeting India. Retrieved May 16, 2018. |
| Talos Group123 | Mercer, W., Rascagneres, P. (2018, January 16). Korea In The Crosshairs. Retrieved May 21, 2018. |
| Talos IPFS 2022 | Edmund Brumaghin. (2022, November 9). Threat Spotlight: Cyber Criminal Adoption of IPFS for Phishing, Malware Campaigns. Retrieved March 8, 2023. |
| Talos Kimsuky Nov 2021 | An, J and Malhotra, A. (2021, November 10). North Korean attackers use malicious blogs to deliver malware to high-profile South Korean targets. Retrieved December 29, 2021. |
| Talos Konni May 2017 | Rascagneres, P. (2017, May 03). KONNI: A Malware Under The Radar For Years. Retrieved November 5, 2018. |
| Talos Lokibot Jan 2021 | Muhammad, I., Unterbrink, H.. (2021, January 6). A Deep Dive into Lokibot Infection Chain. Retrieved August 31, 2021. |
| Talos Manjusaka 2022 | Asheer Malhotra & Vitor Ventura. (2022, August 2). Manjusaka: A Chinese sibling of Sliver and Cobalt Strike. Retrieved September 4, 2024. |
| Talos Micropsia June 2017 | Rascagneres, P., Mercer, W. (2017, June 19). Delphi Used To Score Against Palestine. Retrieved November 13, 2018. |
| Talos MuddyWater Jan 2022 | Malhortra, A and Ventura, V. (2022, January 31). Iranian APT MuddyWater targets Turkish users via malicious PDFs, executables. Retrieved June 22, 2022. |
| Talos MuddyWater May 2019 | Adamitis, D. et al. (2019, May 20). Recent MuddyWater-associated BlackWater campaign shows signs of new anti-detection techniques. Retrieved June 5, 2019. |
| Talos NavRAT May 2018 | Mercer, W., Rascagneres, P. (2018, May 31). NavRAT Uses US-North Korea Summit As Decoy For Attacks In South Korea. Retrieved June 11, 2018. |
| Talos Nyetya June 2017 | Chiu, A. (2016, June 27). New Ransomware Variant "Nyetya" Compromises Systems Worldwide. Retrieved March 26, 2019. |
| Talos Oblique RAT March 2021 | Malhotra, A. (2021, March 2). ObliqueRAT returns with new campaign using hijacked websites. Retrieved September 2, 2021. |
| Talos Olympic Destroyer 2018 | Mercer, W. and Rascagneres, P. (2018, February 12). Olympic Destroyer Takes Aim At Winter Olympics. Retrieved March 14, 2019. |
| Talos PoetRAT April 2020 | Mercer, W, et al. (2020, April 16). PoetRAT: Python RAT uses COVID-19 lures to target Azerbaijan public and private sectors. Retrieved April 27, 2020. |
| Talos PoetRAT October 2020 | Mercer, W. Rascagneres, P. Ventura, V. (2020, October 6). PoetRAT: Malware targeting public and private sector in Azerbaijan evolves . Retrieved April 9, 2021. |
| Talos Promethium June 2020 | Mercer, W. et al. (2020, June 29). PROMETHIUM extends global reach with StrongPity3 APT. Retrieved July 20, 2020. |
| Talos ROKRAT | Mercer, W., Rascagneres, P. (2017, April 03). Introducing ROKRAT. Retrieved May 21, 2018. |
| Talos ROKRAT 2 | Mercer, W., Rascagneres, P. (2017, November 28). ROKRAT Reloaded. Retrieved May 21, 2018. |
| Talos Remcos Aug 2018 | Brumaghin, E., Unterbrink, H. (2018, August 22). Picking Apart Remcos Botnet-In-A-Box. Retrieved November 6, 2018. |
| Talos Roblox Scam 2023 | Tiago Pereira. (2023, November 2). Attackers use JavaScript URLs, API forms and more to scam users in popular online game “Roblox”. Retrieved January 2, 2024. |
| Talos Rocke August 2018 | Liebenberg, D.. (2018, August 30). Rocke: The Champion of Monero Miners. Retrieved May 26, 2020. |
| Talos SVG Smuggling 2022 | Adam Katz and Jaeson Schultz. (2022, December 13). HTML smugglers turn to SVG images. Retrieved March 25, 2025. |
| Talos SamSam Jan 2018 | Ventura, V. (2018, January 22). SamSam - The Evolution Continues Netting Over $325,000 in 4 Weeks. Retrieved April 16, 2019. |
| Talos Sea Turtle 2019 | Cisco Talos. (2019, April 17). Sea Turtle: DNS Hijacking Abuses Trust In Core Internet Service. Retrieved November 20, 2024. |
| Talos Sea Turtle 2019_2 | Paul Rascagneres. (2019, July 9). Sea Turtle keeps on swimming, finds new victims, DNS hijacking techniques. Retrieved November 20, 2024. |
| Talos Seduploader Oct 2017 | Mercer, W., et al. (2017, October 22). "Cyber Conflict" Decoy Document Used in Real Cyber Conflict. Retrieved November 2, 2018. |
| Talos Smoke Loader July 2018 | Baker, B., Unterbrink H. (2018, July 03). Smoking Guns - Smoke Loader learned new tricks. Retrieved July 5, 2018. |
| Talos Sodinokibi April 2019 | Cadieux, P, et al (2019, April 30). Sodinokibi ransomware exploits WebLogic Server vulnerability. Retrieved August 4, 2020. |
| Talos TeamTNT | Darin Smith. (2022, April 21). TeamTNT targeting AWS, Alibaba. Retrieved July 8, 2022. |
| Talos Template Injection July 2017 | Baird, S. et al.. (2017, July 7). Attack on Critical Infrastructure Leverages Template Injection. Retrieved July 21, 2018. |
| Talos TinyTurla September 2021 | Cisco Talos. (2021, September 21). TinyTurla - Turla deploys new malware to keep a secret backdoor on victim machines. Retrieved December 2, 2021. |
| Talos Transparent Tribe May 2021 | Malhotra, A. et al. (2021, May 13). Transparent Tribe APT expands its Windows malware arsenal. Retrieved September 2, 2021. |
| Talos Zeus Panda Nov 2017 | Brumaghin, E., et al. (2017, November 02). Poisoning the Well: Banking Trojan Targets Google Search Results. Retrieved November 5, 2018. |
| Talos ZxShell Oct 2014 | Allievi, A., et al. (2014, October 28). Threat Spotlight: Group 72, Opening the ZxShell. Retrieved September 24, 2019. |
| Targeted SSL Stripping Attacks Are Real | Check Point. (n.d.). Targeted SSL Stripping Attacks Are Real. Retrieved May 24, 2023. |
| Tarrask scheduled task | Microsoft Threat Intelligence Team & Detection and Response Team . (2022, April 12). Tarrask malware uses scheduled tasks for defense evasion. Retrieved June 1, 2022. |
| Tech Republic - Restore AWS Snapshots | Hardiman, N.. (2012, March 20). Backing up and restoring snapshots on Amazon EC2 machines. Retrieved October 8, 2019. |
| TechNet Arp | Microsoft. (n.d.). Arp. Retrieved April 17, 2016. |
| TechNet At | Microsoft. (n.d.). At. Retrieved April 28, 2016. |
| TechNet Blogs Credential Protection | Wilson, B. (2016, April 18). The Importance of KB2871997 and KB2928120 for Credential Protection. Retrieved April 11, 2018. |
| TechNet Certutil | Microsoft. (2012, November 14). Certutil. Retrieved July 3, 2017. |
| TechNet Cmd | Microsoft. (n.d.). Cmd. Retrieved April 18, 2016. |
| TechNet Copy | Microsoft. (n.d.). Copy. Retrieved April 26, 2016. |
| TechNet Credential Theft | Microsoft. (2016, April 15). Attractive Accounts for Credential Theft. Retrieved June 3, 2016. |
| TechNet Del | Microsoft. (n.d.). Del. Retrieved April 22, 2016. |
| TechNet Dir | Microsoft. (n.d.). Dir. Retrieved April 18, 2016. |
| TechNet Dsquery | Microsoft. (n.d.). Dsquery. Retrieved April 18, 2016. |
| TechNet Group Policy Basics | srachui. (2012, February 13). Group Policy Basics – Part 1: Understanding the Structure of a Group Policy Object. Retrieved March 5, 2019. |
Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.
