MITRE ATT&CKsoftware (malware)

S0018 Sykipot

Published 2017-05-31 Modified 2025-04-25 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.1
Created
2017-05-31

Description

Sykipot is malware that has been used in spearphishing campaigns since approximately 2007 against victims primarily in the US. One variant of Sykipot hijacks smart cards on victims. The group using this malware has also been referred to as Sykipot.

Related

Uses · MITRE ATT&CK (11)

  • T1573.002 Asymmetric Cryptography sub-technique
  • T1087.002 Domain Account sub-technique
  • T1056.001 Keylogging sub-technique
  • T1547.001 Registry Run Keys / Startup Folder sub-technique
  • T1055.001 Dynamic-link Library Injection sub-technique
  • T1007 System Service Discovery technique
  • T1016 System Network Configuration Discovery technique
  • T1018 Remote System Discovery technique
  • T1049 System Network Connections Discovery technique
  • T1057 Process Discovery technique
  • T1111 Multi-Factor Authentication Interception technique

References