MITRE ATT&CKgroup

G0054 Sowbug

Published 2018-01-16 Modified 2026-07-31 Official page ↗
Domain
enterprise
Version
1.1
Created
2018-01-16

Description

Sowbug is a threat group that has conducted targeted attacks against organizations in South America and Southeast Asia, particularly government entities, since at least 2015.

Related

Uses · MITRE ATT&CK (11)

  • T1059.003 Windows Command Shell sub-technique
  • T1560.001 Archive via Utility sub-technique
  • T1056.001 Keylogging sub-technique
  • T1036.005 Match Legitimate Resource Name or Location sub-technique
  • S0171 Felismus software (malware)
  • S0188 Starloader software (malware)
  • T1135 Network Share Discovery technique
  • T1003 OS Credential Dumping technique
  • T1039 Data from Network Shared Drive technique
  • T1082 System Information Discovery technique
  • T1083 File and Directory Discovery technique

References