MoustachedBouncer (G1019) | Threat Actor Index

8

Techniques

3

Toolsets

0

CVEs Referenced

0

KEV Entries

About MoustachedBouncer

MoustachedBouncer is a cyberespionage group that has been active since at least 2014 targeting foreign embassies in Belarus.

View MITRE record ↗

Techniques by Tactic (8)

Initial Access

T1659 Content Injection

Execution

T1059.001 PowerShellT1059.007 JavaScript

Privilege Escalation

T1068 Exploitation for Privilege Escalation

Stealth

T1027.002 Software Packing

Collection

T1074.002 Remote Data StagingT1113 Screen Capture

Command & Control

T1090 ProxyT1659 Content Injection

Toolsets (3)

🐛

Disco S1088

Malware · Windows

🐛

NightClub S1090

Malware · Windows

🐛

SharpDisco S1089

Malware · Windows

References & Reports (1)

Faou, M. (2023, August 10). MoustachedBouncer: Espionage against foreign diplomats in Belarus. Retrieved September 25, 2023.

↑