Trusted Design

Cleaver

G0003 · MITRE Pageへのリンク

脅威アクターの詳細

[Cleaver](https://attack.mitre.org/groups/G0003) is a threat group that has been attributed to Iranian actors and is responsible for activity tracked as Operation Cleaver. (Citation: Cylance Cleaver) Strong circumstantial evidence suggests Cleaver is linked to Threat Group 2889 (TG-2889). (Citation: Dell Threat Group 2889)

別名・別称

Cleaver
Threat Group 2889
TG-2889

利用した攻撃手法

• T1587.001 - Malware
• T1003.001 - LSASS Memory
• T1588.002 - Tool
• T1585.001 - Social Media Accounts
• T1557.002 - ARP Cache Poisoning

関連するCVE (攻撃手法に関連)

• CVE-2015-3043 (T1587.001)
• CVE-2016-1990 (T1587.001)
• CVE-2016-1991 (T1587.001)
• CVE-2015-2852 (T1587.001)
• CVE-2015-2854 (T1587.001)
• CVE-2015-2853 (T1587.001)
• CVE-2016-1287 (T1587.001)
• CVE-2016-1562 (T1587.001)
• CVE-2012-0507 (T1587.001)
• CVE-2013-2465 (T1587.001)
• CVE-2013-7331 (T1587.001)
• CVE-2016-4117 (T1587.001)
• CVE-2025-68645 (T1587.001)
• CVE-2016-6532 (T1003.001)
• CVE-2008-1436 (T1003.001)
• CVE-2015-1770 (T1588.002)
• CVE-2014-6352 (T1588.002)

Actor – Pulse グラフ

---

← 脅威アクター一覧に戻る