MITRE ATT&CKgroup
G1002 BITTER
- Domain
- enterprise, mobile
- Aliases
- T-APT-17
- Version
- 1.1
- Created
- 2022-06-01
Description
Related
Uses · MITRE ATT&CK (18)
- T1027.013 Encrypted/Encoded File sub-technique
- T1660 Phishing technique
- S1013 ZxxZ software (malware)
- T1608.001 Upload Malware sub-technique
- T1588.002 Tool sub-technique
- T1583.001 Domains sub-technique
- T1573 Encrypted Channel technique
- T1071.001 Web Protocols sub-technique
- T1204.002 Malicious File sub-technique
- T1568 Dynamic Resolution technique
- T1566.001 Spearphishing Attachment sub-technique
- T1559.002 Dynamic Data Exchange sub-technique
- T1036.004 Masquerade Task or Service sub-technique
- T1053.005 Scheduled Task sub-technique
- T1203 Exploitation for Client Execution technique
- T1068 Exploitation for Privilege Escalation technique
- T1095 Non-Application Layer Protocol technique
- T1105 Ingress Tool Transfer technique
References
- https://www.forcepoint.com/blog/x-labs/bitter-targeted-attack-against-pakistan Forcepoint BITTER Pakistan Oct 2016
- https://blog.talosintelligence.com/2022/05/bitter-apt-adds-bangladesh-to-their.html Cisco Talos Bitter Bangladesh May 2022