MITRE ATT&CKgroup
G0120 Evilnum
- Domain
- enterprise
- Version
- 1.0
- Created
- 2021-01-22
Description
Evilnum is a financially motivated threat group that has been active since at least 2018.
Related
Uses · MITRE ATT&CK (14)
- T1219.002 Remote Desktop Software sub-technique
- S0568 EVILNUM software (malware)
- T1059.007 JavaScript sub-technique
- T1574.001 DLL sub-technique
- T1204.001 Malicious Link sub-technique
- T1497.001 System Checks sub-technique
- T1566.002 Spearphishing Link sub-technique
- T1555 Credentials from Password Stores technique
- T1070.004 File Deletion sub-technique
- T1548.002 Bypass User Account Control sub-technique
- T1539 Steal Web Session Cookie technique
- S0349 LaZagne software (tool)
- S0284 More_eggs software (malware)
- T1105 Ingress Tool Transfer technique
References
- https://www.welivesecurity.com/2020/07/09/more-evil-deep-look-evilnum-toolset/ ESET EvilNum July 2020