PLATINUM (G0068) | Threat Actor Index

Techniques

Toolsets

CVEs Referenced

KEV Entries

About PLATINUM

PLATINUM is an activity group that has targeted victims since at least 2009. The group has focused on targets associated with governments and related organizations in South and Southeast Asia.

View MITRE record ↗

Techniques by Tactic (11)

Initial Access

T1189 Drive-by CompromiseT1566.001 Spearphishing Attachment

Execution

T1204.002 Malicious File

Privilege Escalation

T1055 Process InjectionT1068 Exploitation for Privilege Escalation

Stealth

T1036 MasqueradingT1055 Process Injection

Credential Access

T1003.001 LSASS MemoryT1056.001 KeyloggingT1056.004 Credential API Hooking

Collection

T1056.001 KeyloggingT1056.004 Credential API Hooking

Command & Control

T1095 Non-Application Layer ProtocolT1105 Ingress Tool Transfer

Toolsets (3)

🐛

Dipsind S0200

Malware · Windows

🐛

JPIN S0201

Malware · Windows

🐛

adbupd S0202

Malware · Windows

References & Reports (1)

Windows Defender Advanced Threat Hunting Team. (2016, April 29). PLATINUM: Targeted attacks in South and Southeast Asia. Retrieved February 15, 2018.

↑