Pulse Detail-

ELF binaries, c-grade gateway routers - Gafgyt - Sharky variant

概要

An attacker, probably via SSH, downloads a series of tools for DDOSing, Bruting, and backdooring, and the general spreading of hate and discontent. This is the Sharky variant of the Gafgyt / Gayfgt / Tsunami botnet tools.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

ELF binaries on consumer-grade gateway routers - Gafgyt (score: 0.75)
SSH Attacker d/l's DDOS, Backdoors - ChinaZ - GoArm, BillGates (score: 0.71)
MMD-0047-2015 - SSHV: SSH bruter ELF botnet malware (score: 0.66)
Gafgyt botnet (score: 0.63)
MMD-0035-2015 - .IptabLex or .IptabLes on shellshock. (score: 0.63)

このPulseに関連する脅威アクター (事実ベース)

Kimsuky

Score: 16.87

Matched TTPs:

T1583 - Acquire Infrastructure
T1598.003 - Spearphishing Link
T1040 - Network Sniffing
T1608.001 - Upload Malware
T1583.006 - Web Services
T1102.002 - Bidirectional Communication
T1071.001 - Web Protocols
T1105 - Ingress Tool Transfer

MITREへのリンク →

Sea Turtle

Score: 5.72

Matched TTPs:

T1583 - Acquire Infrastructure
T1203 - Exploitation for Client Execution
T1071.001 - Web Protocols

MITREへのリンク →

Ember Bear

Score: 8.66

Matched TTPs:

T1583 - Acquire Infrastructure
T1491.002 - External Defacement
T1203 - Exploitation for Client Execution

MITREへのリンク →

Indrik Spider

Score: 6.64

Matched TTPs:

T1583 - Acquire Infrastructure
T1584.004 - Server
T1105 - Ingress Tool Transfer

MITREへのリンク →

Agrius

Score: 3.03

Matched TTPs:

T1583 - Acquire Infrastructure

MITREへのリンク →

Contagious Interview

Score: 9.36

Matched TTPs:

T1583 - Acquire Infrastructure
T1608.001 - Upload Malware
T1090 - Proxy
T1583.006 - Web Services

MITREへのリンク →

Sandworm Team

Score: 33.82

Matched TTPs:

T1583 - Acquire Infrastructure
T1491.002 - External Defacement
T1598.003 - Spearphishing Link
T1040 - Network Sniffing
T1608.001 - Upload Malware
T1090 - Proxy
T1584.005 - Botnet
T1102.002 - Bidirectional Communication
T1203 - Exploitation for Client Execution
T1499 - Endpoint Denial of Service
T1071.001 - Web Protocols
T1584.004 - Server
T1105 - Ingress Tool Transfer

MITREへのリンク →

Star Blizzard

Score: 7.47

Matched TTPs:

T1583 - Acquire Infrastructure
T1598.003 - Spearphishing Link
T1608.001 - Upload Malware

MITREへのリンク →

Magic Hound

Score: 15.69

Matched TTPs:

T1016.001 - Internet Connection Discovery
T1598.003 - Spearphishing Link
T1090 - Proxy
T1583.006 - Web Services
T1102.002 - Bidirectional Communication
T1189 - Drive-by Compromise
T1071.001 - Web Protocols
T1105 - Ingress Tool Transfer

MITREへのリンク →

HEXANE

Score: 7.89

Matched TTPs:

T1016.001 - Internet Connection Discovery
T1608.001 - Upload Malware
T1102.002 - Bidirectional Communication
T1105 - Ingress Tool Transfer

MITREへのリンク →

APT29

Score: 7.03

Matched TTPs:

T1016.001 - Internet Connection Discovery
T1583.006 - Web Services
T1203 - Exploitation for Client Execution
T1105 - Ingress Tool Transfer

MITREへのリンク →

Gamaredon Group

Score: 17.57

Matched TTPs:

T1016.001 - Internet Connection Discovery
T1608.001 - Upload Malware
T1090 - Proxy
T1583.006 - Web Services
T1102.003 - One-Way Communication
T1102.002 - Bidirectional Communication
T1071.001 - Web Protocols
T1105 - Ingress Tool Transfer

MITREへのリンク →

TA2541

Score: 7.51

Matched TTPs:

T1016.001 - Internet Connection Discovery
T1608.001 - Upload Malware
T1583.006 - Web Services
T1105 - Ingress Tool Transfer

MITREへのリンク →

Lotus Blossom

Score: 5.67

Matched TTPs:

T1016.001 - Internet Connection Discovery
T1090.001 - Internal Proxy

MITREへのリンク →

FIN13

Score: 7.64

Matched TTPs:

T1016.001 - Internet Connection Discovery
T1071.001 - Web Protocols
T1105 - Ingress Tool Transfer
T1090.001 - Internal Proxy

MITREへのリンク →

HAFNIUM

Score: 14.19

Matched TTPs:

T1016.001 - Internet Connection Discovery
T1583.005 - Botnet
T1584.005 - Botnet
T1583.006 - Web Services
T1071.001 - Web Protocols
T1105 - Ingress Tool Transfer

MITREへのリンク →

Turla

Score: 22.61

Matched TTPs:

T1016.001 - Internet Connection Discovery
T1090 - Proxy
T1583.006 - Web Services
T1584.006 - Web Services
T1102.002 - Bidirectional Communication
T1189 - Drive-by Compromise
T1071.001 - Web Protocols
T1584.004 - Server
T1105 - Ingress Tool Transfer
T1090.001 - Internal Proxy

MITREへのリンク →

Volt Typhoon

Score: 18.87

Matched TTPs:

T1016.001 - Internet Connection Discovery
T1584.008 - Network Devices
T1090 - Proxy
T1584.005 - Botnet
T1584.004 - Server
T1105 - Ingress Tool Transfer
T1090.001 - Internal Proxy

MITREへのリンク →

FIN8

Score: 4.71

Matched TTPs:

T1016.001 - Internet Connection Discovery
T1071.001 - Web Protocols
T1105 - Ingress Tool Transfer

MITREへのリンク →

APT28

Score: 27.82

Matched TTPs:

T1584.008 - Network Devices
T1598.003 - Spearphishing Link
T1040 - Network Sniffing
T1583.006 - Web Services
T1102.002 - Bidirectional Communication
T1203 - Exploitation for Client Execution
T1189 - Drive-by Compromise
T1498 - Network Denial of Service
T1071.001 - Web Protocols
T1105 - Ingress Tool Transfer
T1001.001 - Junk Data

MITREへのリンク →

ZIRCONIUM

Score: 11.27

Matched TTPs:

T1584.008 - Network Devices
T1598.003 - Spearphishing Link
T1583.006 - Web Services
T1102.002 - Bidirectional Communication
T1105 - Ingress Tool Transfer

MITREへのリンク →

Leviathan

Score: 14.62

Matched TTPs:

T1584.008 - Network Devices
T1102.003 - One-Way Communication
T1203 - Exploitation for Client Execution
T1189 - Drive-by Compromise
T1584.004 - Server
T1105 - Ingress Tool Transfer

MITREへのリンク →

Sidewinder

Score: 5.92

Matched TTPs:

T1598.003 - Spearphishing Link
T1203 - Exploitation for Client Execution
T1071.001 - Web Protocols
T1105 - Ingress Tool Transfer

MITREへのリンク →

Scattered Spider

Score: 5.58

Matched TTPs:

T1598.003 - Spearphishing Link
T1090 - Proxy
T1105 - Ingress Tool Transfer

MITREへのリンク →

Mustang Panda

Score: 9.90

Matched TTPs:

T1598.003 - Spearphishing Link
T1608.001 - Upload Malware
T1583.006 - Web Services
T1203 - Exploitation for Client Execution
T1071.001 - Web Protocols
T1105 - Ingress Tool Transfer

MITREへのリンク →

APT32

Score: 11.67

Matched TTPs:

T1598.003 - Spearphishing Link
T1608.001 - Upload Malware
T1583.006 - Web Services
T1203 - Exploitation for Client Execution
T1189 - Drive-by Compromise
T1071.001 - Web Protocols
T1105 - Ingress Tool Transfer

MITREへのリンク →

Moonstone Sleet

Score: 6.40

Matched TTPs:

T1598.003 - Spearphishing Link
T1608.001 - Upload Malware
T1071.001 - Web Protocols
T1105 - Ingress Tool Transfer

MITREへのリンク →

CURIUM

Score: 7.85

Matched TTPs:

T1598.003 - Spearphishing Link
T1584.006 - Web Services
T1189 - Drive-by Compromise

MITREへのリンク →

Dragonfly

Score: 9.33

Matched TTPs:

T1598.003 - Spearphishing Link
T1203 - Exploitation for Client Execution
T1189 - Drive-by Compromise
T1584.004 - Server
T1105 - Ingress Tool Transfer

MITREへのリンク →

Patchwork

Score: 6.49

Matched TTPs:

T1598.003 - Spearphishing Link
T1203 - Exploitation for Client Execution
T1189 - Drive-by Compromise
T1105 - Ingress Tool Transfer

MITREへのリンク →

APT5

Score: 7.98

Matched TTPs:

T1583.005 - Botnet
T1554 - Compromise Host Software Binary

MITREへのリンク →

Ke3chang

Score: 5.81

Matched TTPs:

T1583.005 - Botnet
T1071.001 - Web Protocols
T1105 - Ingress Tool Transfer

MITREへのリンク →

Velvet Ant

Score: 5.96

Matched TTPs:

T1040 - Network Sniffing
T1090.001 - Internal Proxy

MITREへのリンク →

Salt Typhoon

Score: 3.03

Matched TTPs:

T1040 - Network Sniffing

MITREへのリンク →

APT33

Score: 6.49

Matched TTPs:

T1040 - Network Sniffing
T1203 - Exploitation for Client Execution
T1071.001 - Web Protocols
T1105 - Ingress Tool Transfer

MITREへのリンク →

UNC3886

Score: 8.66

Matched TTPs:

T1040 - Network Sniffing
T1554 - Compromise Host Software Binary
T1203 - Exploitation for Client Execution

MITREへのリンク →

DarkVishnya

Score: 3.03

Matched TTPs:

T1040 - Network Sniffing

MITREへのリンク →

Earth Lusca

Score: 14.55

Matched TTPs:

T1608.001 - Upload Malware
T1090 - Proxy
T1583.006 - Web Services
T1584.006 - Web Services
T1189 - Drive-by Compromise
T1584.004 - Server

MITREへのリンク →

LuminousMoth

Score: 3.94

Matched TTPs:

T1608.001 - Upload Malware
T1071.001 - Web Protocols
T1105 - Ingress Tool Transfer

MITREへのリンク →

Mustard Tempest

Score: 4.52

Matched TTPs:

T1608.001 - Upload Malware
T1189 - Drive-by Compromise
T1105 - Ingress Tool Transfer

MITREへのリンク →

OilRig

Score: 5.43

Matched TTPs:

T1608.001 - Upload Malware
T1203 - Exploitation for Client Execution
T1071.001 - Web Protocols
T1105 - Ingress Tool Transfer

MITREへのリンク →

TeamTNT

Score: 8.07

Matched TTPs:

T1608.001 - Upload Malware
T1048 - Exfiltration Over Alternative Protocol
T1071.001 - Web Protocols
T1105 - Ingress Tool Transfer

MITREへのリンク →

LazyScripter

Score: 4.76

Matched TTPs:

T1608.001 - Upload Malware
T1583.006 - Web Services
T1105 - Ingress Tool Transfer

MITREへのリンク →

Threat Group-3390

Score: 11.33

Matched TTPs:

T1608.001 - Upload Malware
T1608.002 - Upload Tool
T1203 - Exploitation for Client Execution
T1189 - Drive-by Compromise
T1071.001 - Web Protocols
T1105 - Ingress Tool Transfer

MITREへのリンク →

TA505

Score: 3.94

Matched TTPs:

T1608.001 - Upload Malware
T1071.001 - Web Protocols
T1105 - Ingress Tool Transfer

MITREへのリンク →

BlackByte

Score: 3.94

Matched TTPs:

T1608.001 - Upload Malware
T1071.001 - Web Protocols
T1105 - Ingress Tool Transfer

MITREへのリンク →

BITTER

Score: 5.43

Matched TTPs:

T1608.001 - Upload Malware
T1203 - Exploitation for Client Execution
T1071.001 - Web Protocols
T1105 - Ingress Tool Transfer

MITREへのリンク →

Saint Bear

Score: 5.48

Matched TTPs:

T1608.001 - Upload Malware
T1583.006 - Web Services
T1203 - Exploitation for Client Execution

MITREへのリンク →

FIN7

Score: 7.16

Matched TTPs:

T1608.001 - Upload Malware
T1583.006 - Web Services
T1102.002 - Bidirectional Communication
T1105 - Ingress Tool Transfer

MITREへのリンク →

EXOTIC LILY

Score: 3.47

Matched TTPs:

T1608.001 - Upload Malware
T1203 - Exploitation for Client Execution

MITREへのリンク →

APT42

Score: 3.16

Matched TTPs:

T1608.001 - Upload Malware
T1071.001 - Web Protocols

MITREへのリンク →

MoustachedBouncer

Score: 6.88

Matched TTPs:

T1659 - Content Injection
T1090 - Proxy

MITREへのリンク →

Medusa Group

Score: 8.11

Matched TTPs:

T1608.002 - Upload Tool
T1583.006 - Web Services
T1071.001 - Web Protocols
T1105 - Ingress Tool Transfer

MITREへのリンク →

Winter Vivern

Score: 11.89

Matched TTPs:

T1056.003 - Web Portal Capture
T1584.006 - Web Services
T1189 - Drive-by Compromise
T1071.001 - Web Protocols
T1105 - Ingress Tool Transfer

MITREへのリンク →

Cinnamon Tempest

Score: 3.12

Matched TTPs:

T1090 - Proxy
T1105 - Ingress Tool Transfer

MITREへのリンク →

Windigo

Score: 4.11

Matched TTPs:

T1090 - Proxy
T1189 - Drive-by Compromise

MITREへのリンク →

POLONIUM

Score: 6.75

Matched TTPs:

T1090 - Proxy
T1583.006 - Web Services
T1102.002 - Bidirectional Communication

MITREへのリンク →

Fox Kitten

Score: 3.12

Matched TTPs:

T1090 - Proxy
T1105 - Ingress Tool Transfer

MITREへのリンク →

APT41

Score: 9.93

Matched TTPs:

T1090 - Proxy
T1203 - Exploitation for Client Execution
T1595.003 - Wordlist Scanning
T1071.001 - Web Protocols
T1105 - Ingress Tool Transfer

MITREへのリンク →

Axiom

Score: 6.88

Matched TTPs:

T1584.005 - Botnet
T1203 - Exploitation for Client Execution
T1189 - Drive-by Compromise

MITREへのリンク →

MuddyWater

Score: 7.87

Matched TTPs:

T1583.006 - Web Services
T1102.002 - Bidirectional Communication
T1203 - Exploitation for Client Execution
T1071.001 - Web Protocols
T1105 - Ingress Tool Transfer

MITREへのリンク →

Lazarus Group

Score: 15.40

Matched TTPs:

T1583.006 - Web Services
T1102.002 - Bidirectional Communication
T1203 - Exploitation for Client Execution
T1189 - Drive-by Compromise
T1071.001 - Web Protocols
T1584.004 - Server
T1105 - Ingress Tool Transfer
T1090.001 - Internal Proxy

MITREへのリンク →

Confucius

Score: 5.47

Matched TTPs:

T1583.006 - Web Services
T1203 - Exploitation for Client Execution
T1071.001 - Web Protocols
T1105 - Ingress Tool Transfer

MITREへのリンク →

Play

Score: 4.91

Matched TTPs:

T1048 - Exfiltration Over Alternative Protocol
T1105 - Ingress Tool Transfer

MITREへのリンク →

APT37

Score: 7.62

Matched TTPs:

T1102.002 - Bidirectional Communication
T1203 - Exploitation for Client Execution
T1189 - Drive-by Compromise
T1071.001 - Web Protocols
T1105 - Ingress Tool Transfer

MITREへのリンク →

APT12

Score: 3.89

Matched TTPs:

T1102.002 - Bidirectional Communication
T1203 - Exploitation for Client Execution

MITREへのリンク →

APT39

Score: 7.29

Matched TTPs:

T1102.002 - Bidirectional Communication
T1071.001 - Web Protocols
T1105 - Ingress Tool Transfer
T1090.001 - Internal Proxy

MITREへのリンク →

Andariel

Score: 4.04

Matched TTPs:

T1203 - Exploitation for Client Execution
T1189 - Drive-by Compromise
T1105 - Ingress Tool Transfer

MITREへのリンク →

Higaisa

Score: 5.61

Matched TTPs:

T1203 - Exploitation for Client Execution
T1071.001 - Web Protocols
T1090.001 - Internal Proxy

MITREへのリンク →

Cobalt Group

Score: 3.46

Matched TTPs:

T1203 - Exploitation for Client Execution
T1071.001 - Web Protocols
T1105 - Ingress Tool Transfer

MITREへのリンク →

BRONZE BUTLER

Score: 5.22

Matched TTPs:

T1203 - Exploitation for Client Execution
T1189 - Drive-by Compromise
T1071.001 - Web Protocols
T1105 - Ingress Tool Transfer

MITREへのリンク →

Transparent Tribe

Score: 3.26

Matched TTPs:

T1203 - Exploitation for Client Execution
T1189 - Drive-by Compromise

MITREへのリンク →

Tropic Trooper

Score: 3.46

Matched TTPs:

T1203 - Exploitation for Client Execution
T1071.001 - Web Protocols
T1105 - Ingress Tool Transfer

MITREへのリンク →

Elderwood

Score: 4.04

Matched TTPs:

T1203 - Exploitation for Client Execution
T1189 - Drive-by Compromise
T1105 - Ingress Tool Transfer

MITREへのリンク →

Darkhotel

Score: 4.04

Matched TTPs:

T1203 - Exploitation for Client Execution
T1189 - Drive-by Compromise
T1105 - Ingress Tool Transfer

MITREへのリンク →

Volatile Cedar

Score: 4.91

Matched TTPs:

T1595.003 - Wordlist Scanning
T1105 - Ingress Tool Transfer

MITREへのリンク →

Storm-1811

Score: 5.31

Matched TTPs:

T1667 - Email Bombing
T1105 - Ingress Tool Transfer

MITREへのリンク →

Windshift

Score: 3.73

Matched TTPs:

T1189 - Drive-by Compromise
T1071.001 - Web Protocols
T1105 - Ingress Tool Transfer

MITREへのリンク →

APT38

Score: 3.73

Matched TTPs:

T1189 - Drive-by Compromise
T1071.001 - Web Protocols
T1105 - Ingress Tool Transfer

MITREへのリンク →

Daggerfly

Score: 6.56

Matched TTPs:

T1189 - Drive-by Compromise
T1071.001 - Web Protocols
T1584.004 - Server
T1105 - Ingress Tool Transfer

MITREへのリンク →

このPulseに関連する脅威アクター (推論ベース)

Sandworm Team

Score: 0.83

Matched TTPs:

T1040 - Network Sniffing
T1071.001 - Web Protocols
T1584.005 - Botnet
T1583 - Acquire Infrastructure
T1608.001 - Upload Malware
T1499 - Endpoint Denial of Service
T1491.002 - External Defacement
T1090 - Proxy
T1105 - Ingress Tool Transfer
T1102.002 - Bidirectional Communication
T1203 - Exploitation for Client Execution
T1584.004 - Server
T1598.003 - Spearphishing Link

MITREへのリンク →

APT28

Score: 0.70

Matched TTPs:

T1040 - Network Sniffing
T1071.001 - Web Protocols
T1584.008 - Network Devices
T1001.001 - Junk Data
T1498 - Network Denial of Service
T1189 - Drive-by Compromise
T1583.006 - Web Services
T1105 - Ingress Tool Transfer
T1102.002 - Bidirectional Communication
T1203 - Exploitation for Client Execution
T1598.003 - Spearphishing Link

MITREへのリンク →

Turla

Score: 0.61

Matched TTPs:

T1071.001 - Web Protocols
T1090.001 - Internal Proxy
T1584.006 - Web Services
T1016.001 - Internet Connection Discovery
T1189 - Drive-by Compromise
T1583.006 - Web Services
T1090 - Proxy
T1105 - Ingress Tool Transfer
T1102.002 - Bidirectional Communication
T1584.004 - Server

MITREへのリンク →

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクターグラフ

← Pulse一覧に戻る

ELF binaries, c-grade gateway routers - Gafgyt - Sharky variant

概要

Indicators

類似Pulses

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

Pulse – 脅威アクター グラフ

Pulse – 脅威アクターグラフ