MITRE ATT&CKcampaign

C0036 Pikabot Distribution February 2024

Published 2024-07-17 Modified 2026-07-31 Official page ↗

Domain: enterprise
Version: 1.0
Created: 2024-07-17

Description

Pikabot was distributed in Pikabot Distribution February 2024 using malicious emails with embedded links leading to malicious ZIP archives requiring user interaction for follow-on infection. The version of Pikabot distributed featured significant changes over the 2023 variant, including reduced code complexity and simplified obfuscation mechanisms.

Uses · MITRE ATT&CK (5)

S1145 Pikabot software (malware)
T1059.007 JavaScript sub-technique
T1574 Hijack Execution Flow technique
T1059.001 PowerShell sub-technique
T1566.002 Spearphishing Link sub-technique

References

https://www.elastic.co/security-labs/pikabot-i-choose-you Elastic Pikabot 2024
https://www.zscaler.com/blogs/security-research/d-evolution-pikabot Zscaler Pikabot 2024

C0036 Pikabot Distribution February 2024

Description

Related

Uses · MITRE ATT&CK (5)

References