Trusted Design

Social Engineering

概要

These are email addresses, hostnames, IP addresses, and domains that we have seen involved in spear-phishing, or other social engineering attempts, such as the registered owner of malicious domains for credential harvesting etc. IOC's will only be added here if they are TARGETED attacks, and not generic spam / malware / etc.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

このPulseに関連する脅威アクター (事実ベース)

Andariel

Score: 3.84
Matched TTPs:
  • T1171 - LLMNR/NBT-NS Poisoning and Relay
MITREへのリンク →

Magic Hound

Score: 30.82
Matched TTPs:
  • T1171 - LLMNR/NBT-NS Poisoning and Relay
  • T1543.003 - Windows Service
  • T1566.002 - Spearphishing Link
  • T1098.007 - Additional Local or Domain Groups
  • T1547.005 - Security Support Provider
  • T1183 - Image File Execution Options Injection
  • T1134.002 - Create Process with Token
  • T1588.001 - Malware
  • T1166 - Setuid and Setgid
  • T1578.002 - Create Cloud Instance
  • T1547.008 - LSASS Driver
  • T1053.002 - At
MITREへのリンク →

HAFNIUM

Score: 9.81
Matched TTPs:
  • T1171 - LLMNR/NBT-NS Poisoning and Relay
  • T1134.002 - Create Process with Token
  • T1593.003 - Code Repositories
MITREへのリンク →

APT41

Score: 6.23
Matched TTPs:
  • T1539 - Steal Web Session Cookie
  • T1588.001 - Malware
MITREへのリンク →

TA551

Score: 6.66
Matched TTPs:
  • T1539 - Steal Web Session Cookie
  • T1134.002 - Create Process with Token
MITREへのリンク →

Kimsuky

Score: 19.05
Matched TTPs:
  • T1543.003 - Windows Service
  • T1566.002 - Spearphishing Link
  • T1098.007 - Additional Local or Domain Groups
  • T1183 - Image File Execution Options Injection
  • T1134.002 - Create Process with Token
  • T1588.001 - Malware
  • T1197 - BITS Jobs
  • T1053.002 - At
MITREへのリンク →

Sidewinder

Score: 10.12
Matched TTPs:
  • T1543.003 - Windows Service
  • T1566.002 - Spearphishing Link
  • T1657 - Financial Theft
  • T1578.001 - Create Snapshot
MITREへのリンク →

FIN7

Score: 7.65
Matched TTPs:
  • T1543.003 - Windows Service
  • T1098.007 - Additional Local or Domain Groups
  • T1588.001 - Malware
  • T1578.001 - Create Snapshot
MITREへのリンク →

Mustard Tempest

Score: 4.73
Matched TTPs:
  • T1543.003 - Windows Service
  • T1053.002 - At
MITREへのリンク →

Sandworm Team

Score: 12.52
Matched TTPs:
  • T1543.003 - Windows Service
  • T1566.002 - Spearphishing Link
  • T1098.007 - Additional Local or Domain Groups
  • T1183 - Image File Execution Options Injection
  • T1134.002 - Create Process with Token
  • T1166 - Setuid and Setgid
MITREへのリンク →

Transparent Tribe

Score: 6.25
Matched TTPs:
  • T1543.003 - Windows Service
  • T1098.007 - Additional Local or Domain Groups
  • T1053.002 - At
MITREへのリンク →

Mustang Panda

Score: 11.84
Matched TTPs:
  • T1543.003 - Windows Service
  • T1566.002 - Spearphishing Link
  • T1098.007 - Additional Local or Domain Groups
  • T1183 - Image File Execution Options Injection
  • T1055.005 - Thread Local Storage
MITREへのリンク →

APT32

Score: 12.97
Matched TTPs:
  • T1543.003 - Windows Service
  • T1566.002 - Spearphishing Link
  • T1098.007 - Additional Local or Domain Groups
  • T1547.005 - Security Support Provider
  • T1134.002 - Create Process with Token
  • T1588.001 - Malware
MITREへのリンク →

APT3

Score: 7.36
Matched TTPs:
  • T1543.003 - Windows Service
  • T1166 - Setuid and Setgid
  • T1578.002 - Create Cloud Instance
MITREへのリンク →

APT1

Score: 8.54
Matched TTPs:
  • T1543.003 - Windows Service
  • T1098.007 - Additional Local or Domain Groups
  • T1183 - Image File Execution Options Injection
  • T1053.002 - At
MITREへのリンク →

Lazarus Group

Score: 19.12
Matched TTPs:
  • T1543.003 - Windows Service
  • T1098.007 - Additional Local or Domain Groups
  • T1183 - Image File Execution Options Injection
  • T1134.002 - Create Process with Token
  • T1588.001 - Malware
  • T1055.005 - Thread Local Storage
  • T1578.001 - Create Snapshot
  • T1547.008 - LSASS Driver
MITREへのリンク →

Leviathan

Score: 5.25
Matched TTPs:
  • T1543.003 - Windows Service
  • T1098.007 - Additional Local or Domain Groups
  • T1183 - Image File Execution Options Injection
MITREへのリンク →

ZIRCONIUM

Score: 13.55
Matched TTPs:
  • T1543.003 - Windows Service
  • T1566.002 - Spearphishing Link
  • T1098.007 - Additional Local or Domain Groups
  • T1588.001 - Malware
  • T1197 - BITS Jobs
  • T1578.001 - Create Snapshot
MITREへのリンク →

EXOTIC LILY

Score: 10.30
Matched TTPs:
  • T1543.003 - Windows Service
  • T1098.007 - Additional Local or Domain Groups
  • T1183 - Image File Execution Options Injection
  • T1134.002 - Create Process with Token
  • T1547.008 - LSASS Driver
MITREへのリンク →

OilRig

Score: 11.40
Matched TTPs:
  • T1543.003 - Windows Service
  • T1098.007 - Additional Local or Domain Groups
  • T1166 - Setuid and Setgid
  • T1556.009 - Conditional Access Policies
  • T1547.008 - LSASS Driver
MITREへのリンク →

Windshift

Score: 3.97
Matched TTPs:
  • T1543.003 - Windows Service
  • T1547.008 - LSASS Driver
MITREへのリンク →

APT29

Score: 8.51
Matched TTPs:
  • T1543.003 - Windows Service
  • T1218.009 - Regsvcs/Regasm
  • T1547.008 - LSASS Driver
MITREへのリンク →

Storm-1811

Score: 9.11
Matched TTPs:
  • T1543.003 - Windows Service
  • T1098.007 - Additional Local or Domain Groups
  • T1578.002 - Create Cloud Instance
  • T1547.008 - LSASS Driver
MITREへのリンク →

Turla

Score: 7.66
Matched TTPs:
  • T1543.003 - Windows Service
  • T1556.009 - Conditional Access Policies
  • T1578.001 - Create Snapshot
MITREへのリンク →

Wizard Spider

Score: 15.18
Matched TTPs:
  • T1543.003 - Windows Service
  • T1183 - Image File Execution Options Injection
  • T1593.003 - Code Repositories
  • T1588.001 - Malware
  • T1166 - Setuid and Setgid
  • T1556.009 - Conditional Access Policies
MITREへのリンク →

Patchwork

Score: 3.91
Matched TTPs:
  • T1543.003 - Windows Service
  • T1566.002 - Spearphishing Link
MITREへのリンク →

TA505

Score: 5.25
Matched TTPs:
  • T1543.003 - Windows Service
  • T1098.007 - Additional Local or Domain Groups
  • T1166 - Setuid and Setgid
MITREへのリンク →

APT42

Score: 5.25
Matched TTPs:
  • T1543.003 - Windows Service
  • T1098.007 - Additional Local or Domain Groups
  • T1183 - Image File Execution Options Injection
MITREへのリンク →

Scattered Spider

Score: 14.19
Matched TTPs:
  • T1566.002 - Spearphishing Link
  • T1098.007 - Additional Local or Domain Groups
  • T1547.005 - Security Support Provider
  • T1144 - Gatekeeper Bypass
  • T1197 - BITS Jobs
MITREへのリンク →

Silent Librarian

Score: 8.79
Matched TTPs:
  • T1566.002 - Spearphishing Link
  • T1098.007 - Additional Local or Domain Groups
  • T1183 - Image File Execution Options Injection
  • T1134.002 - Create Process with Token
MITREへのリンク →

APT28

Score: 11.95
Matched TTPs:
  • T1566.002 - Spearphishing Link
  • T1098.007 - Additional Local or Domain Groups
  • T1197 - BITS Jobs
  • T1146 - Clear Command History
MITREへのリンク →

Star Blizzard

Score: 12.81
Matched TTPs:
  • T1566.002 - Spearphishing Link
  • T1098.007 - Additional Local or Domain Groups
  • T1547.005 - Security Support Provider
  • T1183 - Image File Execution Options Injection
  • T1657 - Financial Theft
MITREへのリンク →

Moonstone Sleet

Score: 14.75
Matched TTPs:
  • T1566.002 - Spearphishing Link
  • T1098.007 - Additional Local or Domain Groups
  • T1183 - Image File Execution Options Injection
  • T1134.002 - Create Process with Token
  • T1197 - BITS Jobs
  • T1547.008 - LSASS Driver
MITREへのリンク →

CURIUM

Score: 11.38
Matched TTPs:
  • T1566.002 - Spearphishing Link
  • T1098.007 - Additional Local or Domain Groups
  • T1183 - Image File Execution Options Injection
  • T1578.001 - Create Snapshot
  • T1547.008 - LSASS Driver
MITREへのリンク →

Dragonfly

Score: 11.22
Matched TTPs:
  • T1566.002 - Spearphishing Link
  • T1098.007 - Additional Local or Domain Groups
  • T1657 - Financial Theft
  • T1578.002 - Create Cloud Instance
MITREへのリンク →

HEXANE

Score: 9.26
Matched TTPs:
  • T1098.007 - Additional Local or Domain Groups
  • T1547.005 - Security Support Provider
  • T1183 - Image File Execution Options Injection
  • T1134.002 - Create Process with Token
MITREへのリンク →

Contagious Interview

Score: 13.10
Matched TTPs:
  • T1098.007 - Additional Local or Domain Groups
  • T1547.005 - Security Support Provider
  • T1183 - Image File Execution Options Injection
  • T1562.010 - Downgrade Attack
  • T1547.008 - LSASS Driver
MITREへのリンク →

APT38

Score: 6.06
Matched TTPs:
  • T1098.007 - Additional Local or Domain Groups
  • T1059.005 - Visual Basic
MITREへのリンク →

Gamaredon Group

Score: 5.36
Matched TTPs:
  • T1098.007 - Additional Local or Domain Groups
  • T1562.010 - Downgrade Attack
MITREへのリンク →

Winter Vivern

Score: 3.61
Matched TTPs:
  • T1098.007 - Additional Local or Domain Groups
  • T1588.001 - Malware
MITREへのリンク →

BITTER

Score: 3.61
Matched TTPs:
  • T1098.007 - Additional Local or Domain Groups
  • T1588.001 - Malware
MITREへのリンク →

LAPSUS$

Score: 5.45
Matched TTPs:
  • T1547.005 - Security Support Provider
  • T1134.002 - Create Process with Token
MITREへのリンク →

FIN13

Score: 8.87
Matched TTPs:
  • T1547.005 - Security Support Provider
  • T1144 - Gatekeeper Bypass
  • T1588.001 - Malware
MITREへのリンク →

Volt Typhoon

Score: 14.46
Matched TTPs:
  • T1547.005 - Security Support Provider
  • T1134.002 - Create Process with Token
  • T1166 - Setuid and Setgid
  • T1584.002 - DNS Server
  • T1578.001 - Create Snapshot
MITREへのリンク →

Medusa Group

Score: 10.26
Matched TTPs:
  • T1183 - Image File Execution Options Injection
  • T1593.003 - Code Repositories
  • T1094 - Custom Command and Control Protocol
MITREへのリンク →

Indrik Spider

Score: 4.57
Matched TTPs:
  • T1183 - Image File Execution Options Injection
  • T1166 - Setuid and Setgid
MITREへのリンク →

Aquatic Panda

Score: 8.23
Matched TTPs:
  • T1144 - Gatekeeper Bypass
  • T1588.001 - Malware
  • T1166 - Setuid and Setgid
MITREへのリンク →

GALLIUM

Score: 3.44
Matched TTPs:
  • T1593.003 - Code Repositories
MITREへのリンク →

BlackByte

Score: 9.57
Matched TTPs:
  • T1593.003 - Code Repositories
  • T1562.010 - Downgrade Attack
  • T1166 - Setuid and Setgid
MITREへのリンク →

FIN6

Score: 4.62
Matched TTPs:
  • T1588.001 - Malware
  • T1547.008 - LSASS Driver
MITREへのリンク →

Naikon

Score: 4.38
Matched TTPs:
  • T1588.001 - Malware
  • T1166 - Setuid and Setgid
MITREへのリンク →

UNC3886

Score: 4.69
Matched TTPs:
  • T1588.001 - Malware
  • T1578.001 - Create Snapshot
MITREへのリンク →

Higaisa

Score: 4.69
Matched TTPs:
  • T1588.001 - Malware
  • T1578.001 - Create Snapshot
MITREへのリンク →

SideCopy

Score: 11.04
Matched TTPs:
  • T1657 - Financial Theft
  • T1584.002 - DNS Server
  • T1053.002 - At
MITREへのリンク →

ToddyCat

Score: 4.81
Matched TTPs:
  • T1166 - Setuid and Setgid
  • T1547.008 - LSASS Driver
MITREへのリンク →

Chimera

Score: 4.88
Matched TTPs:
  • T1166 - Setuid and Setgid
  • T1578.001 - Create Snapshot
MITREへのリンク →

Stealth Falcon

Score: 3.62
Matched TTPs:
  • T1556.009 - Conditional Access Policies
MITREへのリンク →

このPulseに関連する脅威アクター (推論ベース)

Magic Hound

Score: 0.78
Matched TTPs:
  • T1566.002 - Spearphishing Link
  • T1134.002 - Create Process with Token
  • T1588.001 - Malware
  • T1053.002 - At
  • T1543.003 - Windows Service
  • T1547.008 - LSASS Driver
  • T1578.002 - Create Cloud Instance
  • T1547.005 - Security Support Provider
  • T1166 - Setuid and Setgid
  • T1098.007 - Additional Local or Domain Groups
  • T1183 - Image File Execution Options Injection
  • T1171 - LLMNR/NBT-NS Poisoning and Relay
MITREへのリンク →

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

← Pulse一覧に戻る