MITRE ATT&CKsoftware (malware)
S1201 TRANSLATEXT
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.0
- Created
- 2025-01-29
Description
TRANSLATEXT is malware that is believed to be used by Kimsuky. TRANSLATEXT masqueraded as a Google Translate extension for Google Chrome, but is actually a collection of four malicious Javascript files that perform defense evasion, information collection and exfiltration.
Related
Uses · MITRE ATT&CK (15)
- T1176.001 Browser Extensions sub-technique
- T1071.001 Web Protocols sub-technique
- T1102.001 Dead Drop Resolver sub-technique
- T1102.002 Bidirectional Communication sub-technique
- T1059.001 PowerShell sub-technique
- T1555.003 Credentials from Web Browsers sub-technique
- T1036.005 Match Legitimate Resource Name or Location sub-technique
- T1539 Steal Web Session Cookie technique
- T1205 Traffic Signaling technique
- T1185 Browser Session Hijacking technique
- T1012 Query Registry technique
- T1041 Exfiltration Over C2 Channel technique
- T1112 Modify Registry technique
- T1113 Screen Capture technique
- T1114 Email Collection technique
Referenced by MITRE ATT&CK · uses (1)
- G0094 Kimsuky group