Trusted Design

Adobe Reader 0-day

概要

On April 7, 2026, a security researcher described an Adobe Reader zero-day vulnerability that has been exploited since at least December 2025. The vulnerability allows threat actors to execute privileged Acrobat APIs via specially crafted malicious PDF files that execute obfuscated JavaScript when opened. Exploitation allows attackers to steal sensitive user and system data and to potentially launch additional attacks and remotely execute code. Recommendations: Reduce the risk by automatically scanning PDF email attachments, blocking suspicious files, training users to be wary of unsolicited attachments, and advising users to temporarily avoid using Adobe Reader to open PDFs. Reference: https://www.sophos.com/en-us/blog/adobe-reader-zero-day-vulnerability-in-active-exploitation

Created: 2026-05-13

Indicators

類似Pulses

類似するPulseは見つかりませんでした。

このPulseに関連する脅威アクター (事実ベース)

Gamaredon Group

Score: 19.49
Matched TTPs:
  • T1021.005 - VNC
  • T1099 - Timestomp
  • T1527 - Application Access Token
  • T1554 - Compromise Host Software Binary
  • T1597 - Search Closed Sources
  • T1562.001 - Disable or Modify Tools
  • T1591.004 - Identify Roles
MITREへのリンク →

FIN7

Score: 17.76
Matched TTPs:
  • T1021.005 - VNC
  • T1546.013 - PowerShell Profile
  • T1140 - Deobfuscate/Decode Files or Information
  • T1009 - Binary Padding
  • T1562.001 - Disable or Modify Tools
  • T1027 - Obfuscated Files or Information
  • T1591.004 - Identify Roles
  • T1490 - Inhibit System Recovery
MITREへのリンク →

GCMAN

Score: 3.62
Matched TTPs:
  • T1021.005 - VNC
MITREへのリンク →

Fox Kitten

Score: 11.85
Matched TTPs:
  • T1021.005 - VNC
  • T1140 - Deobfuscate/Decode Files or Information
  • T1177 - LSASS Driver
  • T1051 - Shared Webroot
  • T1591.004 - Identify Roles
MITREへのリンク →

Scattered Spider

Score: 36.04
Matched TTPs:
  • T1666 - Modify Cloud Resource Hierarchy
  • T1685.004 - Disable or Modify Linux Audit System Log
  • T1547.005 - Security Support Provider
  • T1609 - Container Administration Command
  • T1083 - File and Directory Discovery
  • T1051 - Shared Webroot
  • T1556.008 - Network Provider DLL
  • T1210 - Exploitation of Remote Services
  • T1597 - Search Closed Sources
  • T1027 - Obfuscated Files or Information
  • T1197 - BITS Jobs
MITREへのリンク →

FIN4

Score: 4.13
Matched TTPs:
  • T1666 - Modify Cloud Resource Hierarchy
MITREへのリンク →

Andariel

Score: 3.84
Matched TTPs:
  • T1171 - LLMNR/NBT-NS Poisoning and Relay
MITREへのリンク →

Magic Hound

Score: 24.44
Matched TTPs:
  • T1171 - LLMNR/NBT-NS Poisoning and Relay
  • T1099 - Timestomp
  • T1140 - Deobfuscate/Decode Files or Information
  • T1016.002 - Wi-Fi Discovery
  • T1547.005 - Security Support Provider
  • T1009 - Binary Padding
  • T1597 - Search Closed Sources
  • T1562.001 - Disable or Modify Tools
  • T1027 - Obfuscated Files or Information
  • T1591.004 - Identify Roles
MITREへのリンク →

HAFNIUM

Score: 23.50
Matched TTPs:
  • T1171 - LLMNR/NBT-NS Poisoning and Relay
  • T1099 - Timestomp
  • T1140 - Deobfuscate/Decode Files or Information
  • T1552.008 - Chat Messages
  • T1210 - Exploitation of Remote Services
  • T1591.004 - Identify Roles
  • T1055.008 - Ptrace System Calls
  • T1490 - Inhibit System Recovery
MITREへのリンク →

Turla

Score: 23.01
Matched TTPs:
  • T1546.013 - PowerShell Profile
  • T1099 - Timestomp
  • T1131 - Authentication Package
  • T1597 - Search Closed Sources
  • T1218.001 - Compiled HTML File
  • T1027.004 - Compile After Delivery
  • T1591.004 - Identify Roles
  • T1556.009 - Conditional Access Policies
  • T1490 - Inhibit System Recovery
MITREへのリンク →

APT32

Score: 18.05
Matched TTPs:
  • T1546.013 - PowerShell Profile
  • T1547.005 - Security Support Provider
  • T1131 - Authentication Package
  • T1592.004 - Client Configurations
  • T1562.001 - Disable or Modify Tools
  • T1591.004 - Identify Roles
  • T1490 - Inhibit System Recovery
MITREへのリンク →

Saint Bear

Score: 8.57
Matched TTPs:
  • T1546.013 - PowerShell Profile
  • T1064 - Scripting
  • T1597 - Search Closed Sources
  • T1591.004 - Identify Roles
MITREへのリンク →

FIN6

Score: 4.72
Matched TTPs:
  • T1546.013 - PowerShell Profile
  • T1597 - Search Closed Sources
  • T1591.004 - Identify Roles
MITREへのリンク →

MuddyWater

Score: 21.56
Matched TTPs:
  • T1546.013 - PowerShell Profile
  • T1140 - Deobfuscate/Decode Files or Information
  • T1518.002 - Backup Software Discovery
  • T1547.011 - Plist Modification
  • T1117 - Regsvr32
  • T1051 - Shared Webroot
  • T1597 - Search Closed Sources
  • T1027.004 - Compile After Delivery
  • T1591.004 - Identify Roles
MITREへのリンク →

Earth Lusca

Score: 13.25
Matched TTPs:
  • T1546.013 - PowerShell Profile
  • T1140 - Deobfuscate/Decode Files or Information
  • T1110.003 - Password Spraying
  • T1218.001 - Compiled HTML File
  • T1027.004 - Compile After Delivery
MITREへのリンク →

Winter Vivern

Score: 8.02
Matched TTPs:
  • T1546.013 - PowerShell Profile
  • T1140 - Deobfuscate/Decode Files or Information
  • T1218.001 - Compiled HTML File
  • T1591.004 - Identify Roles
MITREへのリンク →

Silence

Score: 8.07
Matched TTPs:
  • T1546.013 - PowerShell Profile
  • T1547.011 - Plist Modification
  • T1562.001 - Disable or Modify Tools
  • T1591.004 - Identify Roles
MITREへのリンク →

Contagious Interview

Score: 28.19
Matched TTPs:
  • T1546.013 - PowerShell Profile
  • T1547.005 - Security Support Provider
  • T1131 - Authentication Package
  • T1021.006 - Windows Remote Management
  • T1064 - Scripting
  • T1597 - Search Closed Sources
  • T1562.001 - Disable or Modify Tools
  • T1027.004 - Compile After Delivery
  • T1591.004 - Identify Roles
  • T1651 - Cloud Administration Command
MITREへのリンク →

TA505

Score: 17.05
Matched TTPs:
  • T1546.013 - PowerShell Profile
  • T1527 - Application Access Token
  • T1016.002 - Wi-Fi Discovery
  • T1051 - Shared Webroot
  • T1597 - Search Closed Sources
  • T1027 - Obfuscated Files or Information
  • T1591.004 - Identify Roles
MITREへのリンク →

Cobalt Group

Score: 7.06
Matched TTPs:
  • T1546.013 - PowerShell Profile
  • T1518.002 - Backup Software Discovery
  • T1591.004 - Identify Roles
MITREへのリンク →

Higaisa

Score: 5.76
Matched TTPs:
  • T1546.013 - PowerShell Profile
  • T1591.004 - Identify Roles
  • T1665 - Hide Infrastructure
MITREへのリンク →

Kimsuky

Score: 41.58
Matched TTPs:
  • T1546.013 - PowerShell Profile
  • T1213.006 - Databases
  • T1140 - Deobfuscate/Decode Files or Information
  • T1546.011 - Application Shimming
  • T1009 - Binary Padding
  • T1131 - Authentication Package
  • T1609 - Container Administration Command
  • T1051 - Shared Webroot
  • T1597 - Search Closed Sources
  • T1027.004 - Compile After Delivery
  • T1197 - BITS Jobs
  • T1591.004 - Identify Roles
  • T1665 - Hide Infrastructure
  • T1003.003 - NTDS
  • T1490 - Inhibit System Recovery
MITREへのリンク →

Indrik Spider

Score: 13.43
Matched TTPs:
  • T1546.013 - PowerShell Profile
  • T1051 - Shared Webroot
  • T1552.008 - Chat Messages
  • T1597 - Search Closed Sources
  • T1027 - Obfuscated Files or Information
  • T1591.004 - Identify Roles
MITREへのリンク →

Leafminer

Score: 12.66
Matched TTPs:
  • T1546.013 - PowerShell Profile
  • T1117 - Regsvr32
  • T1101 - Security Support Provider
  • T1051 - Shared Webroot
MITREへのリンク →

Mustang Panda

Score: 19.58
Matched TTPs:
  • T1546.013 - PowerShell Profile
  • T1546.011 - Application Shimming
  • T1169 - Sudo
  • T1136.003 - Cloud Account
  • T1591.004 - Identify Roles
  • T1055.005 - Thread Local Storage
MITREへのリンク →

Star Blizzard

Score: 8.34
Matched TTPs:
  • T1546.013 - PowerShell Profile
  • T1547.005 - Security Support Provider
  • T1609 - Container Administration Command
MITREへのリンク →

HEXANE

Score: 5.67
Matched TTPs:
  • T1099 - Timestomp
  • T1547.005 - Security Support Provider
MITREへのリンク →

APT29

Score: 34.61
Matched TTPs:
  • T1099 - Timestomp
  • T1584.008 - Network Devices
  • T1202 - Indirect Command Execution
  • T1140 - Deobfuscate/Decode Files or Information
  • T1547.011 - Plist Modification
  • T1177 - LSASS Driver
  • T1592.004 - Client Configurations
  • T1568 - Dynamic Resolution
  • T1556.008 - Network Provider DLL
  • T1027.004 - Compile After Delivery
  • T1490 - Inhibit System Recovery
MITREへのリンク →

TA2541

Score: 4.54
Matched TTPs:
  • T1099 - Timestomp
  • T1597 - Search Closed Sources
MITREへのリンク →

FIN13

Score: 17.35
Matched TTPs:
  • T1099 - Timestomp
  • T1584.008 - Network Devices
  • T1140 - Deobfuscate/Decode Files or Information
  • T1547.005 - Security Support Provider
  • T1051 - Shared Webroot
  • T1134.001 - Token Impersonation/Theft
  • T1591.004 - Identify Roles
MITREへのリンク →

Volt Typhoon

Score: 26.38
Matched TTPs:
  • T1099 - Timestomp
  • T1686.003 - Windows Host Firewall
  • T1140 - Deobfuscate/Decode Files or Information
  • T1547.005 - Security Support Provider
  • T1083 - File and Directory Discovery
  • T1552.008 - Chat Messages
  • T1584.002 - DNS Server
  • T1591.004 - Identify Roles
  • T1665 - Hide Infrastructure
MITREへのリンク →

FIN8

Score: 6.04
Matched TTPs:
  • T1099 - Timestomp
  • T1027 - Obfuscated Files or Information
  • T1591.004 - Identify Roles
MITREへのリンク →

Daggerfly

Score: 6.44
Matched TTPs:
  • T1584.008 - Network Devices
  • T1530 - Data from Cloud Storage
MITREへのリンク →

GALLIUM

Score: 7.76
Matched TTPs:
  • T1584.008 - Network Devices
  • T1140 - Deobfuscate/Decode Files or Information
  • T1547.011 - Plist Modification
  • T1591.004 - Identify Roles
MITREへのリンク →

Dragonfly

Score: 13.83
Matched TTPs:
  • T1584.008 - Network Devices
  • T1140 - Deobfuscate/Decode Files or Information
  • T1009 - Binary Padding
  • T1531 - Account Access Removal
  • T1027.004 - Compile After Delivery
  • T1591.004 - Identify Roles
MITREへのリンク →

Ke3chang

Score: 9.55
Matched TTPs:
  • T1584.008 - Network Devices
  • T1140 - Deobfuscate/Decode Files or Information
  • T1198 - SIP and Trust Provider Hijacking
  • T1591.004 - Identify Roles
MITREへのリンク →

Agrius

Score: 6.81
Matched TTPs:
  • T1584.008 - Network Devices
  • T1140 - Deobfuscate/Decode Files or Information
  • T1597 - Search Closed Sources
  • T1591.004 - Identify Roles
MITREへのリンク →

APT41

Score: 14.49
Matched TTPs:
  • T1584.008 - Network Devices
  • T1071.004 - DNS
  • T1140 - Deobfuscate/Decode Files or Information
  • T1177 - LSASS Driver
  • T1027 - Obfuscated Files or Information
  • T1591.004 - Identify Roles
MITREへのリンク →

APT5

Score: 5.02
Matched TTPs:
  • T1584.008 - Network Devices
  • T1140 - Deobfuscate/Decode Files or Information
  • T1591.004 - Identify Roles
MITREへのリンク →

menuPass

Score: 11.61
Matched TTPs:
  • T1584.008 - Network Devices
  • T1527 - Application Access Token
  • T1140 - Deobfuscate/Decode Files or Information
  • T1547.011 - Plist Modification
  • T1591.004 - Identify Roles
MITREへのリンク →

Threat Group-3390

Score: 5.02
Matched TTPs:
  • T1584.008 - Network Devices
  • T1140 - Deobfuscate/Decode Files or Information
  • T1591.004 - Identify Roles
MITREへのリンク →

Wizard Spider

Score: 12.59
Matched TTPs:
  • T1584.008 - Network Devices
  • T1083 - File and Directory Discovery
  • T1597 - Search Closed Sources
  • T1591.004 - Identify Roles
  • T1556.009 - Conditional Access Policies
MITREへのリンク →

Ember Bear

Score: 14.91
Matched TTPs:
  • T1584.008 - Network Devices
  • T1140 - Deobfuscate/Decode Files or Information
  • T1051 - Shared Webroot
  • T1597 - Search Closed Sources
  • T1562.001 - Disable or Modify Tools
  • T1003.003 - NTDS
MITREへのリンク →

Lazarus Group

Score: 24.89
Matched TTPs:
  • T1071.004 - DNS
  • T1009 - Binary Padding
  • T1547.011 - Plist Modification
  • T1210 - Exploitation of Remote Services
  • T1597 - Search Closed Sources
  • T1562.001 - Disable or Modify Tools
  • T1591.004 - Identify Roles
  • T1055.005 - Thread Local Storage
  • T1665 - Hide Infrastructure
MITREへのリンク →

APT28

Score: 19.87
Matched TTPs:
  • T1071.004 - DNS
  • T1140 - Deobfuscate/Decode Files or Information
  • T1131 - Authentication Package
  • T1547.011 - Plist Modification
  • T1197 - BITS Jobs
  • T1591.004 - Identify Roles
  • T1055.008 - Ptrace System Calls
MITREへのリンク →

Storm-0501

Score: 16.33
Matched TTPs:
  • T1685.004 - Disable or Modify Linux Audit System Log
  • T1686.003 - Windows Host Firewall
  • T1140 - Deobfuscate/Decode Files or Information
  • T1027 - Obfuscated Files or Information
  • T1158 - Hidden Files and Directories
MITREへのリンク →

Sandworm Team

Score: 22.35
Matched TTPs:
  • T1484.002 - Trust Modification
  • T1686.003 - Windows Host Firewall
  • T1140 - Deobfuscate/Decode Files or Information
  • T1016.002 - Wi-Fi Discovery
  • T1562.001 - Disable or Modify Tools
  • T1027 - Obfuscated Files or Information
  • T1075 - Pass the Hash
MITREへのリンク →

Leviathan

Score: 9.73
Matched TTPs:
  • T1484.002 - Trust Modification
  • T1140 - Deobfuscate/Decode Files or Information
  • T1554 - Compromise Host Software Binary
MITREへのリンク →

PROMETHIUM

Score: 6.51
Matched TTPs:
  • T1530 - Data from Cloud Storage
  • T1490 - Inhibit System Recovery
MITREへのリンク →

Patchwork

Score: 7.63
Matched TTPs:
  • T1530 - Data from Cloud Storage
  • T1591.004 - Identify Roles
  • T1665 - Hide Infrastructure
MITREへのリンク →

Rocke

Score: 10.35
Matched TTPs:
  • T1140 - Deobfuscate/Decode Files or Information
  • T1009 - Binary Padding
  • T1597 - Search Closed Sources
  • T1562.001 - Disable or Modify Tools
  • T1027.004 - Compile After Delivery
MITREへのリンク →

Medusa Group

Score: 8.90
Matched TTPs:
  • T1140 - Deobfuscate/Decode Files or Information
  • T1009 - Binary Padding
  • T1597 - Search Closed Sources
  • T1027 - Obfuscated Files or Information
  • T1591.004 - Identify Roles
MITREへのリンク →

Sea Turtle

Score: 4.14
Matched TTPs:
  • T1140 - Deobfuscate/Decode Files or Information
  • T1490 - Inhibit System Recovery
MITREへのリンク →

Cinnamon Tempest

Score: 4.77
Matched TTPs:
  • T1140 - Deobfuscate/Decode Files or Information
  • T1027.004 - Compile After Delivery
  • T1591.004 - Identify Roles
MITREへのリンク →

BlackByte

Score: 13.04
Matched TTPs:
  • T1140 - Deobfuscate/Decode Files or Information
  • T1009 - Binary Padding
  • T1134.001 - Token Impersonation/Theft
  • T1597 - Search Closed Sources
  • T1027 - Obfuscated Files or Information
  • T1591.004 - Identify Roles
MITREへのリンク →

ToddyCat

Score: 7.60
Matched TTPs:
  • T1140 - Deobfuscate/Decode Files or Information
  • T1009 - Binary Padding
  • T1591.004 - Identify Roles
  • T1665 - Hide Infrastructure
MITREへのリンク →

INC Ransom

Score: 10.18
Matched TTPs:
  • T1140 - Deobfuscate/Decode Files or Information
  • T1083 - File and Directory Discovery
  • T1597 - Search Closed Sources
  • T1027 - Obfuscated Files or Information
  • T1591.004 - Identify Roles
MITREへのリンク →

UNC3886

Score: 16.88
Matched TTPs:
  • T1140 - Deobfuscate/Decode Files or Information
  • T1546.011 - Application Shimming
  • T1009 - Binary Padding
  • T1021.006 - Windows Remote Management
  • T1597 - Search Closed Sources
  • T1027.004 - Compile After Delivery
  • T1591.004 - Identify Roles
MITREへのリンク →

Moses Staff

Score: 3.81
Matched TTPs:
  • T1140 - Deobfuscate/Decode Files or Information
  • T1009 - Binary Padding
MITREへのリンク →

Axiom

Score: 9.29
Matched TTPs:
  • T1140 - Deobfuscate/Decode Files or Information
  • T1177 - LSASS Driver
  • T1160 - Launch Daemon
MITREへのリンク →

Play

Score: 6.89
Matched TTPs:
  • T1140 - Deobfuscate/Decode Files or Information
  • T1597 - Search Closed Sources
  • T1591.004 - Identify Roles
  • T1490 - Inhibit System Recovery
MITREへのリンク →

Salt Typhoon

Score: 7.66
Matched TTPs:
  • T1140 - Deobfuscate/Decode Files or Information
  • T1009 - Binary Padding
  • T1110.003 - Password Spraying
MITREへのリンク →

APT39

Score: 6.56
Matched TTPs:
  • T1140 - Deobfuscate/Decode Files or Information
  • T1547.011 - Plist Modification
  • T1027.004 - Compile After Delivery
MITREへのリンク →

Akira

Score: 8.68
Matched TTPs:
  • T1137.005 - Outlook Rules
  • T1597 - Search Closed Sources
  • T1027 - Obfuscated Files or Information
MITREへのリンク →

RedCurl

Score: 9.44
Matched TTPs:
  • T1016.002 - Wi-Fi Discovery
  • T1051 - Shared Webroot
  • T1027.004 - Compile After Delivery
  • T1591.004 - Identify Roles
MITREへのリンク →

LAPSUS$

Score: 10.21
Matched TTPs:
  • T1547.005 - Security Support Provider
  • T1609 - Container Administration Command
  • T1556.008 - Network Provider DLL
MITREへのリンク →

TeamTNT

Score: 14.29
Matched TTPs:
  • T1009 - Binary Padding
  • T1110.003 - Password Spraying
  • T1051 - Shared Webroot
  • T1597 - Search Closed Sources
  • T1591.004 - Identify Roles
  • T1665 - Hide Infrastructure
MITREへのリンク →

OilRig

Score: 13.06
Matched TTPs:
  • T1009 - Binary Padding
  • T1117 - Regsvr32
  • T1051 - Shared Webroot
  • T1591.004 - Identify Roles
  • T1556.009 - Conditional Access Policies
MITREへのリンク →

APT38

Score: 16.51
Matched TTPs:
  • T1009 - Binary Padding
  • T1590 - Gather Victim Network Information
  • T1597 - Search Closed Sources
  • T1027 - Obfuscated Files or Information
  • T1493 - Transmitted Data Manipulation
  • T1591.004 - Identify Roles
MITREへのリンク →

Velvet Ant

Score: 9.20
Matched TTPs:
  • T1009 - Binary Padding
  • T1597 - Search Closed Sources
  • T1562.001 - Disable or Modify Tools
  • T1490 - Inhibit System Recovery
MITREへのリンク →

SilverTerrier

Score: 3.29
Matched TTPs:
  • T1131 - Authentication Package
MITREへのリンク →

Tonto Team

Score: 5.09
Matched TTPs:
  • T1547.011 - Plist Modification
  • T1027.004 - Compile After Delivery
MITREへのリンク →

APT3

Score: 9.51
Matched TTPs:
  • T1547.011 - Plist Modification
  • T1177 - LSASS Driver
  • T1051 - Shared Webroot
  • T1591.004 - Identify Roles
MITREへのリンク →

APT33

Score: 8.54
Matched TTPs:
  • T1117 - Regsvr32
  • T1051 - Shared Webroot
  • T1562.001 - Disable or Modify Tools
MITREへのリンク →

Deep Panda

Score: 3.29
Matched TTPs:
  • T1177 - LSASS Driver
MITREへのリンク →

BRONZE BUTLER

Score: 8.94
Matched TTPs:
  • T1592.004 - Client Configurations
  • T1597 - Search Closed Sources
  • T1027.004 - Compile After Delivery
  • T1591.004 - Identify Roles
MITREへのリンク →

Silent Librarian

Score: 3.44
Matched TTPs:
  • T1609 - Container Administration Command
MITREへのリンク →

Darkhotel

Score: 4.80
Matched TTPs:
  • T1064 - Scripting
  • T1591.004 - Identify Roles
MITREへのリンク →

APT12

Score: 4.54
Matched TTPs:
  • T1055.002 - Portable Executable Injection
MITREへのリンク →

Tropic Trooper

Score: 10.59
Matched TTPs:
  • T1136.003 - Cloud Account
  • T1591.004 - Identify Roles
  • T1665 - Hide Infrastructure
  • T1490 - Inhibit System Recovery
MITREへのリンク →

CURIUM

Score: 3.62
Matched TTPs:
  • T1218.001 - Compiled HTML File
MITREへのリンク →

DarkHydrus

Score: 4.13
Matched TTPs:
  • T1531 - Account Access Removal
MITREへのリンク →

Storm-1811

Score: 7.83
Matched TTPs:
  • T1027 - Obfuscated Files or Information
  • T1486 - Data Encrypted for Impact
  • T1591.004 - Identify Roles
MITREへのリンク →

Moonstone Sleet

Score: 5.78
Matched TTPs:
  • T1027 - Obfuscated Files or Information
  • T1197 - BITS Jobs
MITREへのリンク →

SideCopy

Score: 4.13
Matched TTPs:
  • T1584.002 - DNS Server
MITREへのリンク →

APT37

Score: 3.30
Matched TTPs:
  • T1027.004 - Compile After Delivery
  • T1591.004 - Identify Roles
MITREへのリンク →

ZIRCONIUM

Score: 6.73
Matched TTPs:
  • T1027.004 - Compile After Delivery
  • T1197 - BITS Jobs
  • T1591.004 - Identify Roles
MITREへのリンク →

Machete

Score: 3.30
Matched TTPs:
  • T1027.004 - Compile After Delivery
  • T1591.004 - Identify Roles
MITREへのリンク →

FIN10

Score: 3.62
Matched TTPs:
  • T1591.004 - Identify Roles
  • T1490 - Inhibit System Recovery
MITREへのリンク →

Chimera

Score: 3.79
Matched TTPs:
  • T1591.004 - Identify Roles
  • T1665 - Hide Infrastructure
MITREへのリンク →

Stealth Falcon

Score: 3.62
Matched TTPs:
  • T1556.009 - Conditional Access Policies
MITREへのリンク →

このPulseに関連する脅威アクター (推論ベース)

Kimsuky

Score: 0.70
Matched TTPs:
  • T1051 - Shared Webroot
  • T1009 - Binary Padding
  • T1597 - Search Closed Sources
  • T1027.004 - Compile After Delivery
  • T1490 - Inhibit System Recovery
  • T1140 - Deobfuscate/Decode Files or Information
  • T1546.011 - Application Shimming
  • T1591.004 - Identify Roles
  • T1213.006 - Databases
  • T1003.003 - NTDS
  • T1609 - Container Administration Command
  • T1197 - BITS Jobs
  • T1546.013 - PowerShell Profile
  • T1665 - Hide Infrastructure
  • T1131 - Authentication Package
MITREへのリンク →

Scattered Spider

Score: 0.61
Matched TTPs:
  • T1051 - Shared Webroot
  • T1547.005 - Security Support Provider
  • T1083 - File and Directory Discovery
  • T1210 - Exploitation of Remote Services
  • T1027 - Obfuscated Files or Information
  • T1666 - Modify Cloud Resource Hierarchy
  • T1685.004 - Disable or Modify Linux Audit System Log
  • T1556.008 - Network Provider DLL
  • T1609 - Container Administration Command
  • T1197 - BITS Jobs
  • T1597 - Search Closed Sources
MITREへのリンク →

APT29

Score: 0.58
Matched TTPs:
  • T1490 - Inhibit System Recovery
  • T1027.004 - Compile After Delivery
  • T1140 - Deobfuscate/Decode Files or Information
  • T1099 - Timestomp
  • T1547.011 - Plist Modification
  • T1556.008 - Network Provider DLL
  • T1584.008 - Network Devices
  • T1568 - Dynamic Resolution
  • T1592.004 - Client Configurations
  • T1202 - Indirect Command Execution
  • T1177 - LSASS Driver
MITREへのリンク →

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

← Pulse一覧に戻る