Trusted Design

Gallmaker

G0084 · MITRE Pageへのリンク

脅威アクターの詳細

[Gallmaker](https://attack.mitre.org/groups/G0084) is a cyberespionage group that has targeted victims in the Middle East and has been active since at least December 2017. The group has mainly targeted victims in the defense, military, and government sectors.(Citation: Symantec Gallmaker Oct 2018)

別名・別称

Gallmaker

利用した攻撃手法

• T1560.001 - Archive via Utility
• T1559.002 - Dynamic Data Exchange
• T1204.002 - Malicious File
• T1566.001 - Spearphishing Attachment
• T1059.001 - PowerShell
• T1027 - Obfuscated Files or Information

関連するCVE (攻撃手法に関連)

• CVE-2015-4495 (T1560.001)
• CVE-2015-5749 (T1560.001)
• CVE-2016-1898 (T1560.001)
• CVE-2016-1897 (T1560.001)
• CVE-2015-7261 (T1560.001)
• CVE-2015-6036 (T1560.001)
• CVE-2015-7262 (T1560.001)
• CVE-2015-0932 (T1560.001)
• CVE-2010-3081 (T1560.001)
• CVE-2017-16929 (T1566.001)
• CVE-2025-31125 (T1560.001)
• CVE-2025-68645 (T1560.001)
• CVE-2014-4114 (T1059.001)
• CVE-2015-1770 (T1059.001)
• CVE-2012-1856 (T1559.002)
• CVE-2015-2545 (T1566.001)
• CVE-2014-6332 (T1559.002)
• CVE-2017-0199 (T1059.001)
• CVE-2015-2424 (T1559.002)
• CVE-2015-0097 (T1559.002)
• CVE-2012-0158 (T1566.001)
• CVE-2014-1761 (T1566.001)
• CVE-2015-1641 (T1559.002)
• CVE-2017-0261 (T1559.002)
• CVE-2017-0262 (T1559.002)
• CVE-2013-3906 (T1027)
• CVE-2014-6352 (T1059.001)
• CVE-2010-3333 (T1204.002)
• CVE-2012-2539 (T1566.001)
• CVE-2010-0806 (T1559.002)
• CVE-2017-8570 (T1559.002)
• CVE-2015-0016 (T1566.001)
• CVE-2010-0188 (T1204.002)
• CVE-2010-2884 (T1204.002)
• CVE-2013-0640 (T1204.002)
• CVE-2011-0611 (T1204.002)
• CVE-2010-1553 (T1566.001)
• CVE-2015-2853 (T1566.001)
• CVE-2012-1876 (T1566.001)
• CVE-2013-3660 (T1566.001)
• CVE-2013-7331 (T1566.001)
• CVE-2009-3129 (T1566.001)
• CVE-2013-5990 (T1566.001)
• CVE-2012-4969 (T1059.001)

Actor – Pulse グラフ

---

← 脅威アクター一覧に戻る