Sec
Lookup
Search
MITRE ATT&CK
software (malware)
S0042
LOWBALL
Published 2017-05-31
Modified 2025-04-25
Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.1
Created
2017-05-31
Description
LOWBALL
is malware used by
admin@338
. It was used in August 2015 in email messages targeting Hong Kong-based media organizations.
Related
Uses · MITRE ATT&CK
(3)
T1071.001
Web Protocols
sub-technique
T1102.002
Bidirectional Communication
sub-technique
T1105
Ingress Tool Transfer
technique
Referenced by MITRE ATT&CK · uses
(1)
G0018
admin@338
group
References
https://www.fireeye.com/blog/threat-research/2015/11/china-based-threat.html
FireEye admin@338