G0094

2019-08-26 • MITREKimsuky

G0094 is the MITRE ATT&CK group identifier for Kimsuky and related tracking names including Black Banshee, Velvet Chollima, Emerald Sleet, THALLIUM, APT43, TA427, Springtail, Earth Kumiho, and PatheticSlug. ATT&CK records spoofed domains, purchased hosting, payload hosting on web services, HTTP and FTP command channels, and archiving and encrypting collected data before exfiltration.

Related Actors

Related Reports

Top Authors

View all reports in this cluster

View all reports in this cluster