MITRE ATT&CKsoftware (malware)

S1088 Disco

Published 2023-09-25 Modified 2023-10-04 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.0
Created
2023-09-25

Description

Disco is a custom implant that has been used by MoustachedBouncer since at least 2020 including in campaigns using targeted malicious content injection for initial access and command and control.

Related

Uses · MITRE ATT&CK (5)

  • T1659 Content Injection technique
  • T1071.002 File Transfer Protocols sub-technique
  • T1204.002 Malicious File sub-technique
  • T1053.005 Scheduled Task sub-technique
  • T1105 Ingress Tool Transfer technique

Referenced by MITRE ATT&CK · uses (1)

  • G1019 MoustachedBouncer group

References