MITRE ATT&CKsoftware (malware)

S0027 Zeroaccess

Published 2017-05-31 Modified 2025-04-25 Official page ↗

Domain: enterprise
Version: 1.0
Created: 2017-05-31

Description

Zeroaccess is a kernel-mode Rootkit that attempts to add victims to the ZeroAccess botnet, often for monetary gain.

Related

Uses · MITRE ATT&CK (2)

T1564.004 NTFS File Attributes sub-technique
T1014 Rootkit technique

References

https://sophosnews.files.wordpress.com/2012/04/zeroaccess2.pdf Sophos ZeroAccess