Trusted Design

Star Blizzard

G1033 · MITRE Pageへのリンク

脅威アクターの詳細

[Star Blizzard](https://attack.mitre.org/groups/G1033) is a cyber espionage and influence group originating in Russia that has been active since at least 2019. [Star Blizzard](https://attack.mitre.org/groups/G1033) campaigns align closely with Russian state interests and have included persistent phishing and credential theft against academic, defense, government, NGO, and think tank organizations in NATO countries, particularly the US and the UK.(Citation: Microsoft Star Blizzard August 2022)(Citation: CISA Star Blizzard Advisory December 2023)(Citation: StarBlizzard)(Citation: Google TAG COLDRIVER January 2024)

別名・別称

Star Blizzard
SEABORGIUM
Callisto Group
TA446
COLDRIVER

利用した攻撃手法

• T1583 - Acquire Infrastructure
• T1059.007 - JavaScript
• T1539 - Steal Web Session Cookie
• T1204.002 - Malicious File
• T1598.003 - Spearphishing Link
• T1566.001 - Spearphishing Attachment
• T1586.002 - Email Accounts
• T1608.001 - Upload Malware
• T1583.001 - Domains
• T1589 - Gather Victim Identity Information
• T1585.002 - Email Accounts
• T1114.003 - Email Forwarding Rule
• T1598.002 - Spearphishing Attachment
• T1593 - Search Open Websites/Domains
• T1588.002 - Tool
• T1078 - Valid Accounts
• T1585.001 - Social Media Accounts
• T1114.002 - Remote Email Collection
• T1550.004 - Web Session Cookie

関連するCVE (攻撃手法に関連)

• CVE-2014-0322 (T1608.001)
• CVE-2015-2419 (T1608.001)
• CVE-2016-0189 (T1608.001)
• CVE-2014-4114 (T1608.001)
• CVE-2015-1770 (T1588.002)
• CVE-2015-2545 (T1608.001)
• CVE-2017-0199 (T1608.001)
• CVE-2012-0158 (T1598.002)
• CVE-2013-3906 (T1608.001)
• CVE-2014-6352 (T1588.002)
• CVE-2015-0016 (T1078)
• CVE-2010-3333 (T1608.001)
• CVE-2010-0188 (T1078)
• CVE-2010-2884 (T1598.003)
• CVE-2013-0640 (T1598.003)
• CVE-2011-0611 (T1589)
• CVE-2015-5119 (T1608.001)
• CVE-2015-5122 (T1608.001)
• CVE-2015-1427 (T1598.003)
• CVE-2012-1856 (T1078)
• CVE-2015-2546 (T1078)
• CVE-2014-6332 (T1608.001)
• CVE-2015-3785 (T1598.002)
• CVE-2015-5897 (T1078)
• CVE-2015-7645 (T1598.003)
• CVE-2017-12149 (T1598.003)
• CVE-2015-3043 (T1608.001)
• CVE-2015-3456 (T1078)
• CVE-2015-3090 (T1608.001)
• CVE-2010-1553 (T1566.001)
• CVE-2015-3113 (T1598.003)
• CVE-2015-2590 (T1589)
• CVE-2015-2424 (T1598.002)
• CVE-2015-5477 (T1598.003)
• CVE-2015-4495 (T1078)
• CVE-2014-1761 (T1598.002)
• CVE-2015-2502 (T1608.001)
• CVE-2014-6271 (T1608.001)
• CVE-2013-2094 (T1078)
• CVE-2014-4113 (T1078)
• CVE-2015-8562 (T1598.003)
• CVE-2015-7808 (T1078)
• CVE-2012-1889 (T1608.001)
• CVE-2016-1990 (T1078)
• CVE-2016-1991 (T1598.003)
• CVE-2016-1010 (T1608.001)
• CVE-2016-1019 (T1078)
• CVE-2016-0984 (T1608.001)
• CVE-2016-1001 (T1598.003)
• CVE-2016-0998 (T1608.001)
• CVE-2015-1641 (T1598.002)
• CVE-2015-1701 (T1078)
• CVE-2015-0313 (T1608.001)
• CVE-2015-0359 (T1608.001)
• CVE-2014-0329 (T1608.001)
• CVE-2015-5130 (T1608.001)
• CVE-2015-5134 (T1608.001)
• CVE-2015-5539 (T1608.001)
• CVE-2015-5557 (T1608.001)
• CVE-2015-5563 (T1608.001)
• CVE-2015-5559 (T1608.001)
• CVE-2015-5540 (T1608.001)
• CVE-2015-5561 (T1608.001)
• CVE-2015-5551 (T1608.001)
• CVE-2015-5564 (T1608.001)
• CVE-2015-5565 (T1608.001)
• CVE-2015-5550 (T1608.001)
• CVE-2015-5566 (T1608.001)
• CVE-2015-5127 (T1608.001)
• CVE-2015-5556 (T1608.001)
• CVE-2015-5749 (T1598.002)
• CVE-2015-3628 (T1078)
• CVE-2015-6034 (T1078)
• CVE-2015-2852 (T1598.002)
• CVE-2015-2854 (T1598.002)
• CVE-2015-2853 (T1598.002)
• CVE-2015-7755 (T1598.003)
• CVE-2012-4969 (T1608.001)
• CVE-2016-1898 (T1585.002)
• CVE-2016-1897 (T1585.002)
• CVE-2016-1287 (T1598.002)
• CVE-2015-7261 (T1598.002)
• CVE-2015-6036 (T1598.002)
• CVE-2015-6022 (T1598.002)
• CVE-2015-7262 (T1078)
• CVE-2015-8286 (T1598.002)
• CVE-2015-8287 (T1608.001)
• CVE-2016-1562 (T1598.003)
• CVE-2016-2342 (T1598.003)
• CVE-2016-2343 (T1608.001)
• CVE-2017-0263 (T1078)
• CVE-2017-0261 (T1608.001)
• CVE-2017-0262 (T1608.001)
• CVE-2016-6532 (T1598.003)
• CVE-2016-9494 (T1598.002)
• CVE-2016-9496 (T1078)
• CVE-2016-9495 (T1598.002)
• CVE-2017-3212 (T1598.002)
• CVE-2025-55182 (T1598.002)
• CVE-2025-61882 (T1598.003)
• CVE-2015-0311 (T1608.001)
• CVE-2015-0932 (T1598.002)
• CVE-2012-0056 (T1078)
• CVE-2010-3081 (T1078)
• CVE-2012-3213 (T1598.002)
• CVE-2012-4792 (T1608.001)
• CVE-2012-1258 (T1078)
• CVE-2015-0336 (T1608.001)
• CVE-2011-3544 (T1598.002)
• CVE-2014-3153 (T1078)
• CVE-2014-7911 (T1608.001)
• CVE-2014-4322 (T1078)
• CVE-2015-3636 (T1078)
• CVE-2013-6282 (T1589)
• CVE-2015-3105 (T1608.001)
• CVE-2014-0497 (T1598.003)
• CVE-2014-8361 (T1598.003)
• CVE-2017-16929 (T1608.001)
• CVE-2017-17215 (T1598.002)
• CVE-2013-0074 (T1598.002)
• CVE-2012-0507 (T1598.002)
• CVE-2013-2465 (T1598.002)
• CVE-2014-8439 (T1598.002)
• CVE-2013-2551 (T1608.001)
• CVE-2014-0569 (T1598.003)
• CVE-2014-0515 (T1598.003)
• CVE-2015-0310 (T1589)
• CVE-2012-4681 (T1078)
• CVE-2014-1776 (T1078)
• CVE-2014-0556 (T1608.001)
• CVE-2012-1876 (T1585.002)
• CVE-2015-5560 (T1598.003)
• CVE-2015-0057 (T1078)
• CVE-2012-2539 (T1608.001)
• CVE-2015-0071 (T1608.001)
• CVE-2014-9163 (T1598.003)
• CVE-2012-1723 (T1598.002)
• CVE-2015-1761 (T1078)
• CVE-2014-8440 (T1608.001)
• CVE-2013-3660 (T1078)
• CVE-2010-0806 (T1598.002)
• CVE-2010-1297 (T1598.003)
• CVE-2013-7331 (T1078)
• CVE-2015-2360 (T1078)
• CVE-2014-4148 (T1608.001)
• CVE-2011-3402 (T1608.001)
• CVE-2014-6324 (T1078)
• CVE-2010-2883 (T1598.003)
• CVE-2013-0634 (T1598.003)
• CVE-2014-7247 (T1608.001)
• CVE-2012-5054 (T1598.003)
• CVE-2013-2678 (T1585.002)
• CVE-2010-0738 (T1078)
• CVE-2015-2426 (T1608.001)
• CVE-2008-1436 (T1078)
• CVE-2010-0232 (T1078)
• CVE-2010-4398 (T1078)
• CVE-2013-0641 (T1598.003)
• CVE-2014-3393 (T1598.002)
• CVE-2012-6422 (T1078)
• CVE-2013-2595 (T1078)
• CVE-2014-2273 (T1598.003)
• CVE-2015-4902 (T1608.001)
• CVE-2015-2387 (T1078)
• CVE-2009-3129 (T1598.002)
• CVE-2011-1255 (T1078)
• CVE-2013-5990 (T1598.002)
• CVE-2017-8570 (T1608.001)
• CVE-2012-0611 (T1608.001)
• CVE-2016-4117 (T1608.001)
• CVE-2017-0001 (T1078)
• CVE-2017-7255 (T1598.003)
• CVE-2017-0143 (T1608.001)
• CVE-2023-1389 (T1078)
• CVE-2025-13335 (T1598.003)
• CVE-2025-13927 (T1078)
• CVE-2025-13928 (T1078)
• CVE-2025-24893 (T1078)
• CVE-2025-31125 (T1078)
• CVE-2025-34026 (T1598.002)
• CVE-2025-54313 (T1589)
• CVE-2025-55183 (T1078)
• CVE-2025-55184 (T1598.002)
• CVE-2025-68645 (T1078)
• CVE-2026-0723 (T1598.002)
• CVE-2026-1102 (T1078)
• CVE-2026-20127 (T1078)
• CVE-2015-0097 (T1598.002)
• CVE-2015-6585 (T1585.002)
• CVE-2014-3897 (T1608.001)
• CVE-2010-2572 (T1598.002)
• CVE-2025-66478 (T1598.002)

Actor – Pulse グラフ

---

← 脅威アクター一覧に戻る