MITRE ATT&CKsoftware (malware)
S0646 SpicyOmelette
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.0
- Created
- 2021-09-21
Description
SpicyOmelette is a JavaScript based remote access tool that has been used by Cobalt Group since at least 2018.
Related
Uses · MITRE ATT&CK (11)
- T1059.007 JavaScript sub-technique
- T1204.001 Malicious Link sub-technique
- T1566.002 Spearphishing Link sub-technique
- T1518.001 Security Software Discovery sub-technique
- T1553.002 Code Signing sub-technique
- T1518 Software Discovery technique
- T1005 Data from Local System technique
- T1016 System Network Configuration Discovery technique
- T1018 Remote System Discovery technique
- T1082 System Information Discovery technique
- T1105 Ingress Tool Transfer technique
Referenced by MITRE ATT&CK · uses (1)
- G0080 Cobalt Group group
References
- https://www.secureworks.com/blog/cybercriminals-increasingly-trying-to-ensnare-the-big-financial-fish Secureworks GOLD KINGSWOOD September 2018