MITRE ATT&CKsoftware (malware)

S0112 ROCKBOOT

Published 2017-05-31 Modified 2025-04-25 Official page ↗

Domain: enterprise
Platforms: Windows
Version: 1.1
Created: 2017-05-31

Description

ROCKBOOT is a Bootkit that has been used by an unidentified, suspected China-based group.

Related

Uses · MITRE ATT&CK (1)

T1542.003 Bootkit sub-technique

Referenced by MITRE ATT&CK · uses (1)

G0096 APT41 group

References

https://www.fireeye.com/blog/threat-research/2015/12/fin1-targets-boot-record.html FireEye Bootkits