Trusted Design

Recent Email Phishing Campaigns – Mitigation and Response

概要

Between June and July 2015, the United States Computer Emergency Readiness Team (US-CERT) received reports of multiple, ongoing and likely evolving, email-based phishing campaigns targeting U.S. Government agencies and private sector organizations. This alert provides general and phishing-specific mitigation strategies and countermeasures.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

Office 365 Phishing attacks create a sustained insider nightmare for IT | CSO Online (score: 0.64)
Phishing email - Credential Harvesting Subject" Quick Response"! (score: 0.63)
NCCIC / US-CERT: Malware Initial Findings Report (MIFR) - 10134756 (score: 0.63)
CoT Phishing Email 20171108 (score: 0.63)
Malicious E-mail Phishing (score: 0.63)

このPulseに関連する脅威アクター (事実ベース)

Contagious Interview

Score: 12.38

Matched TTPs:

T1044 - File System Permissions Weakness
T1183 - Image File Execution Options Injection
T1030 - Data Transfer Size Limits
T1547.008 - LSASS Driver

MITREへのリンク →

Ember Bear

Score: 7.75

Matched TTPs:

T1564.008 - Email Hiding Rules
T1578 - Modify Cloud Compute Infrastructure

MITREへのリンク →

Sandworm Team

Score: 18.52

Matched TTPs:

T1564.008 - Email Hiding Rules
T1543.003 - Windows Service
T1566.002 - Spearphishing Link
T1183 - Image File Execution Options Injection
T1134.002 - Create Process with Token
T1122 - Component Object Model Hijacking
T1573 - Encrypted Channel

MITREへのリンク →

Silent Librarian

Score: 10.89

Matched TTPs:

T1578 - Modify Cloud Compute Infrastructure
T1566.002 - Spearphishing Link
T1183 - Image File Execution Options Injection
T1134.002 - Create Process with Token

MITREへのリンク →

Magic Hound

Score: 17.53

Matched TTPs:

T1578 - Modify Cloud Compute Infrastructure
T1543.003 - Windows Service
T1566.002 - Spearphishing Link
T1024 - Custom Cryptographic Protocol
T1183 - Image File Execution Options Injection
T1134.002 - Create Process with Token
T1547.008 - LSASS Driver

MITREへのリンク →

Scattered Spider

Score: 20.13

Matched TTPs:

T1578 - Modify Cloud Compute Infrastructure
T1566.002 - Spearphishing Link
T1535 - Unused/Unsupported Cloud Regions
T1019 - System Firmware
T1030 - Data Transfer Size Limits
T1197 - BITS Jobs

MITREへのリンク →

Kimsuky

Score: 24.42

Matched TTPs:

T1543.003 - Windows Service
T1566.002 - Spearphishing Link
T1024 - Custom Cryptographic Protocol
T1183 - Image File Execution Options Injection
T1134.002 - Create Process with Token
T1057 - Process Discovery
T1562.013 - Disable or Modify Network Device Firewall
T1030 - Data Transfer Size Limits
T1197 - BITS Jobs

MITREへのリンク →

Sidewinder

Score: 7.53

Matched TTPs:

T1543.003 - Windows Service
T1566.002 - Spearphishing Link
T1657 - Financial Theft

MITREへのリンク →

FIN7

Score: 7.66

Matched TTPs:

T1543.003 - Windows Service
T1057 - Process Discovery
T1573 - Encrypted Channel

MITREへのリンク →

Mustang Panda

Score: 8.86

Matched TTPs:

T1543.003 - Windows Service
T1566.002 - Spearphishing Link
T1024 - Custom Cryptographic Protocol
T1183 - Image File Execution Options Injection

MITREへのリンク →

APT32

Score: 6.43

Matched TTPs:

T1543.003 - Windows Service
T1566.002 - Spearphishing Link
T1134.002 - Create Process with Token

MITREへのリンク →

APT1

Score: 3.73

Matched TTPs:

T1543.003 - Windows Service
T1183 - Image File Execution Options Injection

MITREへのリンク →

Lazarus Group

Score: 12.06

Matched TTPs:

T1543.003 - Windows Service
T1183 - Image File Execution Options Injection
T1134.002 - Create Process with Token
T1057 - Process Discovery
T1547.008 - LSASS Driver

MITREへのリンク →

Leviathan

Score: 6.40

Matched TTPs:

T1543.003 - Windows Service
T1024 - Custom Cryptographic Protocol
T1183 - Image File Execution Options Injection

MITREへのリンク →

ZIRCONIUM

Score: 7.34

Matched TTPs:

T1543.003 - Windows Service
T1566.002 - Spearphishing Link
T1197 - BITS Jobs

MITREへのリンク →

EXOTIC LILY

Score: 8.78

Matched TTPs:

T1543.003 - Windows Service
T1183 - Image File Execution Options Injection
T1134.002 - Create Process with Token
T1547.008 - LSASS Driver

MITREへのリンク →

OilRig

Score: 6.64

Matched TTPs:

T1543.003 - Windows Service
T1024 - Custom Cryptographic Protocol
T1547.008 - LSASS Driver

MITREへのリンク →

Windshift

Score: 3.97

Matched TTPs:

T1543.003 - Windows Service
T1547.008 - LSASS Driver

MITREへのリンク →

Cobalt Group

Score: 4.38

Matched TTPs:

T1543.003 - Windows Service
T1573 - Encrypted Channel

MITREへのリンク →

APT29

Score: 9.38

Matched TTPs:

T1543.003 - Windows Service
T1024 - Custom Cryptographic Protocol
T1122 - Component Object Model Hijacking
T1547.008 - LSASS Driver

MITREへのリンク →

RedCurl

Score: 4.19

Matched TTPs:

T1543.003 - Windows Service
T1122 - Component Object Model Hijacking

MITREへのリンク →

Storm-1811

Score: 11.54

Matched TTPs:

T1543.003 - Windows Service
T1567.003 - Exfiltration to Text Storage Sites
T1030 - Data Transfer Size Limits
T1547.008 - LSASS Driver

MITREへのリンク →

Wizard Spider

Score: 3.73

Matched TTPs:

T1543.003 - Windows Service
T1183 - Image File Execution Options Injection

MITREへのリンク →

TA577

Score: 4.11

Matched TTPs:

T1543.003 - Windows Service
T1024 - Custom Cryptographic Protocol

MITREへのリンク →

Patchwork

Score: 3.91

Matched TTPs:

T1543.003 - Windows Service
T1566.002 - Spearphishing Link

MITREへのリンク →

APT42

Score: 6.77

Matched TTPs:

T1543.003 - Windows Service
T1183 - Image File Execution Options Injection
T1030 - Data Transfer Size Limits

MITREへのリンク →

APT28

Score: 14.60

Matched TTPs:

T1566.002 - Spearphishing Link
T1024 - Custom Cryptographic Protocol
T1057 - Process Discovery
T1122 - Component Object Model Hijacking
T1197 - BITS Jobs

MITREへのリンク →

Star Blizzard

Score: 11.03

Matched TTPs:

T1566.002 - Spearphishing Link
T1024 - Custom Cryptographic Protocol
T1183 - Image File Execution Options Injection
T1657 - Financial Theft

MITREへのリンク →

Moonstone Sleet

Score: 19.44

Matched TTPs:

T1566.002 - Spearphishing Link
T1183 - Image File Execution Options Injection
T1134.002 - Create Process with Token
T1057 - Process Discovery
T1573 - Encrypted Channel
T1197 - BITS Jobs
T1547.008 - LSASS Driver

MITREへのリンク →

CURIUM

Score: 7.27

Matched TTPs:

T1566.002 - Spearphishing Link
T1183 - Image File Execution Options Injection
T1547.008 - LSASS Driver

MITREへのリンク →

Dragonfly

Score: 9.01

Matched TTPs:

T1566.002 - Spearphishing Link
T1657 - Financial Theft
T1573 - Encrypted Channel

MITREへのリンク →

HEXANE

Score: 7.48

Matched TTPs:

T1024 - Custom Cryptographic Protocol
T1183 - Image File Execution Options Injection
T1134.002 - Create Process with Token

MITREへのリンク →

LAPSUS$

Score: 15.10

Matched TTPs:

T1024 - Custom Cryptographic Protocol
T1134.002 - Create Process with Token
T1019 - System Firmware
T1122 - Component Object Model Hijacking
T1030 - Data Transfer Size Limits

MITREへのリンク →

TeamTNT

Score: 3.44

Matched TTPs:

T1535 - Unused/Unsupported Cloud Regions

MITREへのリンク →

Storm-0501

Score: 3.44

Matched TTPs:

T1535 - Unused/Unsupported Cloud Regions

MITREへのリンク →

Rocke

Score: 3.44

Matched TTPs:

T1535 - Unused/Unsupported Cloud Regions

MITREへのリンク →

Volt Typhoon

Score: 9.25

Matched TTPs:

T1535 - Unused/Unsupported Cloud Regions
T1134.002 - Create Process with Token
T1057 - Process Discovery

MITREへのリンク →

Saint Bear

Score: 5.56

Matched TTPs:

T1134.002 - Create Process with Token
T1030 - Data Transfer Size Limits

MITREへのリンク →

HAFNIUM

Score: 5.27

Matched TTPs:

T1134.002 - Create Process with Token
T1122 - Component Object Model Hijacking

MITREへのリンク →

PROMETHIUM

Score: 4.13

Matched TTPs:

T1547.015 - Login Items

MITREへのリンク →

UNC3886

Score: 4.13

Matched TTPs:

T1547.015 - Login Items

MITREへのリンク →

SideCopy

Score: 3.62

Matched TTPs:

T1657 - Financial Theft

MITREへのリンク →

GOLD SOUTHFIELD

Score: 8.96

Matched TTPs:

T1122 - Component Object Model Hijacking
T1562.013 - Disable or Modify Network Device Firewall
T1573 - Encrypted Channel

MITREへのリンク →

Threat Group-3390

Score: 5.67

Matched TTPs:

T1122 - Component Object Model Hijacking
T1573 - Encrypted Channel

MITREへのリンク →

Sea Turtle

Score: 6.03

Matched TTPs:

T1122 - Component Object Model Hijacking
T1562.013 - Disable or Modify Network Device Firewall

MITREへのリンク →

INC Ransom

Score: 3.29

Matched TTPs:

T1562.013 - Disable or Modify Network Device Firewall

MITREへのリンク →

Axiom

Score: 3.29

Matched TTPs:

T1562.013 - Disable or Modify Network Device Firewall

MITREへのリンク →

AppleJeus

Score: 3.29

Matched TTPs:

T1562.013 - Disable or Modify Network Device Firewall

MITREへのリンク →

APT41

Score: 5.96

Matched TTPs:

T1573 - Encrypted Channel
T1030 - Data Transfer Size Limits

MITREへのリンク →

このPulseに関連する脅威アクター (推論ベース)

Kimsuky

Score: 0.79

Matched TTPs:

T1562.013 - Disable or Modify Network Device Firewall
T1030 - Data Transfer Size Limits
T1024 - Custom Cryptographic Protocol
T1543.003 - Windows Service
T1057 - Process Discovery
T1197 - BITS Jobs
T1134.002 - Create Process with Token
T1566.002 - Spearphishing Link
T1183 - Image File Execution Options Injection

MITREへのリンク →

Scattered Spider

Score: 0.68

Matched TTPs:

T1578 - Modify Cloud Compute Infrastructure
T1535 - Unused/Unsupported Cloud Regions
T1030 - Data Transfer Size Limits
T1019 - System Firmware
T1197 - BITS Jobs
T1566.002 - Spearphishing Link

MITREへのリンク →

Moonstone Sleet

Score: 0.65

Matched TTPs:

T1547.008 - LSASS Driver
T1057 - Process Discovery
T1573 - Encrypted Channel
T1197 - BITS Jobs
T1134.002 - Create Process with Token
T1566.002 - Spearphishing Link
T1183 - Image File Execution Options Injection

MITREへのリンク →

Sandworm Team

Score: 0.65

Matched TTPs:

T1543.003 - Windows Service
T1573 - Encrypted Channel
T1122 - Component Object Model Hijacking
T1134.002 - Create Process with Token
T1566.002 - Spearphishing Link
T1183 - Image File Execution Options Injection
T1564.008 - Email Hiding Rules

MITREへのリンク →

Magic Hound

Score: 0.62

Matched TTPs:

T1578 - Modify Cloud Compute Infrastructure
T1024 - Custom Cryptographic Protocol
T1547.008 - LSASS Driver
T1543.003 - Windows Service
T1134.002 - Create Process with Token
T1566.002 - Spearphishing Link
T1183 - Image File Execution Options Injection

MITREへのリンク →

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクターグラフ

← Pulse一覧に戻る