MITRE ATT&CKsoftware (malware)

S0623 Siloscape

Published 2021-06-18 Modified 2025-04-25 Official page ↗
Domain
enterprise
Platforms
Windows, Containers
Version
1.0
Created
2021-06-18

Description

Siloscape is malware that targets Kubernetes clusters through Windows containers. Siloscape was first observed in March 2021.

Related

Uses · MITRE ATT&CK (14)

  • T1611 Escape to Host technique
  • T1609 Container Administration Command technique
  • T1090.003 Multi-hop Proxy sub-technique
  • T1059.003 Windows Command Shell sub-technique
  • T1134.001 Token Impersonation/Theft sub-technique
  • T1518 Software Discovery technique
  • T1190 Exploit Public-Facing Application technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1027 Obfuscated Files or Information technique
  • T1068 Exploitation for Privilege Escalation technique
  • T1069 Permission Groups Discovery technique
  • T1071 Application Layer Protocol technique
  • T1083 File and Directory Discovery technique
  • T1106 Native API technique

References