MITRE ATT&CKsoftware (malware)

S9057 CRASHPAD

Published 2026-09-28 Modified 2026-10-01 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.0
Created
2026-09-28

Description

CRASHPAD is a Windows executable written in C++ that gathers data from web browsers. CRASHPAD  was first observed in 2025 and has been affiliated with the cyber espionage threat group NIMBUS MANTICORE.

Related

Uses · MITRE ATT&CK (4)

  • T1134.001 Token Impersonation/Theft sub-technique
  • T1555.003 Credentials from Web Browsers sub-technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1106 Native API technique

Referenced by MITRE ATT&CK · uses (1)

  • G1059 NIMBUS MANTICORE group

References