Trusted Design

Thrip

G0076 · MITRE Pageへのリンク

脅威アクターの詳細

[Thrip](https://attack.mitre.org/groups/G0076) is an espionage group that has targeted satellite communications, telecoms, and defense contractor companies in the U.S. and Southeast Asia. The group uses custom malware as well as "living off the land" techniques. (Citation: Symantec Thrip June 2018)

別名・別称

Thrip

利用した攻撃手法

• T1059.001 - PowerShell
• T1588.002 - Tool
• T1219.002 - Remote Desktop Software
• T1048.003 - Exfiltration Over Unencrypted Non-C2 Protocol

関連するCVE (攻撃手法に関連)

• CVE-2014-4114 (T1059.001)
• CVE-2015-1770 (T1588.002)
• CVE-2017-0199 (T1219.002)
• CVE-2012-4969 (T1059.001)
• CVE-2014-6352 (T1588.002)
• CVE-2016-0998 (T1219.002)
• CVE-2015-8286 (T1219.002)
• CVE-2015-0016 (T1219.002)
• CVE-2017-16929 (T1219.002)
• CVE-2014-3393 (T1219.002)
• CVE-2014-3897 (T1219.002)
• CVE-2017-7255 (T1219.002)

Actor – Pulse グラフ

---

← 脅威アクター一覧に戻る