Penetration testing
Essential Eight
Resources
Intelligence
About
Contact
Request a quote
Home
›
Groups
›
Suckfly
Suckfly
G0039
🇨🇳 China
5
Techniques
1
Toolsets
0
CVEs Referenced
0
KEV Entries
About Suckfly
Suckfly
is a China-based threat group that has been active since at least 2014.
View MITRE record ↗
Techniques by Tactic
(5)
Initial Access
T1078 Valid Accounts
Execution
T1059.003 Windows Command Shell
Persistence
T1078 Valid Accounts
Privilege Escalation
T1078 Valid Accounts
Stealth
T1078 Valid Accounts
Defence Impairment
T1553.002 Code Signing
Credential Access
T1003 OS Credential Dumping
Discovery
T1046 Network Service Discovery
Toolsets
(1)
🐛
Nidiran
S0118
Malware · Windows
References & Reports
(2)
DiMaggio, J. (2016, March 15). Suckfly: Revealing the secret life of your code signing certificates. Retrieved August 3, 2016.
DiMaggio, J. (2016, May 17). Indian organizations targeted in Suckfly attacks. Retrieved August 3, 2016.
↑