Trusted Design

TA17-117A Intrusions Affecting Multiple Victims Across Multiple Sectors

概要

US-CERT IR-ALERT-MED-17-093-0, TA17-117A The National Cybersecurity and Communications Integration Center (NCCIC) has become aware of an emerging sophisticated campaign, occurring since at least May 2016, that uses multiple malware implants. Initial victims have been identified in several sectors, including information technology, energy, healthcare and public health, communications, and critical manufacturing. According to preliminary analysis, threat actors appear to be leveraging stolen administrative credentials (local and domain) and certificates, along with placing sophisticated malware implants on critical systems. Some of the campaign victims have been IT service providers, where credential compromises could potentially be leveraged to access customer environments. Depending on the defensive mitigations in place, the threat actor could possibly gain full access to networks and data in a way that appears legitimate to existing monitoring tools.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• TA17-117A: Intrusions Affecting Multiple Victims Across Multiple Sectors (score: 0.97)
• Intrusions Affecting Multiple Victims Across Multiple Sectors (score: 0.92)
• Fidelis Threat Advisory #1017: Phishing in Plain Sight (score: 0.65)
• Threat Group-3390 Targets Organizations for Cyberespionage (score: 0.64)
• TA17-164A: HIDDEN COBRA (score: 0.61)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る