Sowbug (G0054) | Threat Actor Index

Techniques

Toolsets

CVEs Referenced

KEV Entries

About Sowbug

Sowbug is a threat group that has conducted targeted attacks against organizations in South America and Southeast Asia, particularly government entities, since at least 2015.

View MITRE record ↗

Techniques by Tactic (9)

Execution

T1059.003 Windows Command Shell

Stealth

T1036.005 Match Legitimate Resource Name or Location

Credential Access

T1003 OS Credential DumpingT1056.001 Keylogging

Discovery

T1082 System Information DiscoveryT1083 File and Directory DiscoveryT1135 Network Share Discovery

Collection

T1039 Data from Network Shared DriveT1056.001 KeyloggingT1560.001 Archive via Utility

Toolsets (2)

🐛

Felismus S0171

Malware · Windows

🐛

Starloader S0188

Malware · Windows

References & Reports (1)

Symantec Security Response. (2017, November 7). Sowbug: Cyber espionage group targets South American and Southeast Asian governments. Retrieved Novemb

↑