MITRE ATT&CKsoftware (malware)

S0128 BADNEWS

Published 2017-05-31 Modified 2025-04-25 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.2
Created
2017-05-31

Description

BADNEWS is malware that has been used by the actors responsible for the Patchwork campaign. Its name was given due to its use of RSS feeds, forums, and blogs for command and control.

Related

Uses · MITRE ATT&CK (24)

  • T1573.001 Symmetric Cryptography sub-technique
  • T1071.001 Web Protocols sub-technique
  • T1102.001 Dead Drop Resolver sub-technique
  • T1102.002 Bidirectional Communication sub-technique
  • T1132.001 Standard Encoding sub-technique
  • T1074.001 Local Data Staging sub-technique
  • T1574.001 DLL sub-technique
  • T1059.003 Windows Command Shell sub-technique
  • T1056.001 Keylogging sub-technique
  • T1036.001 Invalid Code Signature sub-technique
  • T1036.005 Match Legitimate Resource Name or Location sub-technique
  • T1547.001 Registry Run Keys / Startup Folder sub-technique
  • T1055.012 Process Hollowing sub-technique
  • T1053.005 Scheduled Task sub-technique
  • T1005 Data from Local System technique
  • T1025 Data from Removable Media technique
  • T1039 Data from Network Shared Drive technique
  • T1083 File and Directory Discovery technique
  • T1105 Ingress Tool Transfer technique
  • T1106 Native API technique
  • T1113 Screen Capture technique
  • T1119 Automated Collection technique
  • T1120 Peripheral Device Discovery technique
  • T1132 Data Encoding technique

Referenced by MITRE ATT&CK · uses (1)

References