MITRE ATT&CKsoftware (malware)
S0493 GoldenSpy
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.1
- Created
- 2020-07-23
Description
GoldenSpy is a backdoor malware which has been packaged with legitimate tax preparation software. GoldenSpy was discovered targeting organizations in China, being delivered with the "Intelligent Tax" software suite which is produced by the Golden Tax Department of Aisino Credit Information Co. and required to pay local taxes.
Related
Uses · MITRE ATT&CK (15)
- T1027.013 Encrypted/Encoded File sub-technique
- T1071.001 Web Protocols sub-technique
- T1571 Non-Standard Port technique
- T1195.002 Compromise Software Supply Chain sub-technique
- T1059.003 Windows Command Shell sub-technique
- T1497.003 Time Based Checks sub-technique
- T1036.005 Match Legitimate Resource Name or Location sub-technique
- T1070.004 File Deletion sub-technique
- T1136.001 Local Account sub-technique
- T1543.003 Windows Service sub-technique
- T1041 Exfiltration Over C2 Channel technique
- T1082 System Information Discovery technique
- T1083 File and Directory Discovery technique
- T1105 Ingress Tool Transfer technique
- T1106 Native API technique