MITRE ATT&CKgroup

G0084 Gallmaker

Published 2019-01-30 Modified 2026-07-31 Official page ↗
Domain
enterprise
Version
1.1
Created
2019-01-30

Description

Gallmaker is a cyberespionage group that has targeted victims in the Middle East and has been active since at least December 2017. The group has mainly targeted victims in the defense, military, and government sectors.

Related

Uses · MITRE ATT&CK (6)

  • T1204.002 Malicious File sub-technique
  • T1059.001 PowerShell sub-technique
  • T1566.001 Spearphishing Attachment sub-technique
  • T1560.001 Archive via Utility sub-technique
  • T1559.002 Dynamic Data Exchange sub-technique
  • T1027 Obfuscated Files or Information technique

References