MITRE ATT&CKsoftware (malware)
S0090 Rover
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.1
- Created
- 2017-05-31
Description
Rover is malware suspected of being used for espionage purposes. It was used in 2015 in a targeted email sent to an Indian Ambassador to Afghanistan.
Related
Uses · MITRE ATT&CK (10)
- T1074.001 Local Data Staging sub-technique
- T1056.001 Keylogging sub-technique
- T1547.001 Registry Run Keys / Startup Folder sub-technique
- T1005 Data from Local System technique
- T1020 Automated Exfiltration technique
- T1025 Data from Removable Media technique
- T1083 File and Directory Discovery technique
- T1112 Modify Registry technique
- T1113 Screen Capture technique
- T1119 Automated Collection technique