ATT&CK Changes Between v19.1 and v19.2

Key

New objects: ATT&CK objects which are only present in the new release.
Major version changes: ATT&CK objects that have a major version change. (e.g. 1.0 → 2.0)
Minor version changes: ATT&CK objects that have a minor version change. (e.g. 1.0 → 1.1)
Other version changes: ATT&CK objects that have a version change of any other kind. (e.g. 1.0 → 1.2)
Patches: ATT&CK objects that have been patched while keeping the version the same. (e.g., 1.0 → 1.0 but something like a typo, a URL, or some metadata was fixed)
Object revocations: ATT&CK objects which are revoked by a different object.
Object deprecations: ATT&CK objects which are deprecated and no longer in use, and not replaced.
Object deletions: ATT&CK objects which are no longer found in the STIX data.

Additional formats

These ATT&CK Navigator layer files can be uploaded to ATT&CK Navigator manually.

This JSON file contains the machine readble output used to create this page: changelog.json

Techniques

enterprise-attack

Patches

[T1069.003] Permission Groups Discovery: Cloud Groups

Current version: 1.5

Details

values_changed
STIX Field	Old value	New Value
modified	2025-10-24 17:48:26.982000+00:00	2026-08-04 20:30:53.932000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[T1087.003] Account Discovery: Email Account

Current version: 1.2

Details

values_changed
STIX Field	Old value	New Value
modified	2025-10-24 17:48:44.685000+00:00	2026-08-04 20:30:54.394000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[T1564.008] Hide Artifacts: Email Hiding Rules

Current version: 2.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 15:12:00.620000+00:00	2026-08-04 20:30:53.394000+00:00

[T1546] Event Triggered Execution

Current version: 1.4

Details

values_changed
STIX Field	Old value	New Value
modified	2025-10-24 17:49:15.866000+00:00	2026-08-04 20:30:56.386000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[T1210] Exploitation of Remote Services

Current version: 1.2

Details

values_changed
STIX Field	Old value	New Value
modified	2025-10-24 17:49:09.112000+00:00	2026-08-04 20:30:55.427000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[T1649] Steal or Forge Authentication Certificates

Current version: 1.2

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-15 23:12:50.646000+00:00	2026-08-04 20:30:54.961000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

Software

enterprise-attack

New Software

[S9042] CanisterWorm

Current version: 1.0

Description:

CanisterWorm is a self-propagating malware that has been used by TeamPCP in credential harvesting and software supply chain campaigns since at least 2026. CanisterWorm has used npm credentials to infect software packages and propagate across developer ecosystems. CanisterWorm has a targeted wiper component and can use decentralized C2 infrastructure implemented via an Internet Computer Protocol (ICP) blockchain canister.(Citation: Aikido TeamPCP Telnyx MAR 2026)(Citation: Palo Alto TeamPCP MAR 2026)(Citation: Aikido CanisterWorm MAR 2026)(Citation: Aikido TeamPCP Trivy MAR 2026)

[S9044] Kali365

Current version: 1.0

Description:

Kali365 is a Phishing-as-a-Service (PHaaS) kit first observed in April 2026 that generates victim-targeted lures across multiple operating systems to induce users into copying and pasting actor-controlled commands for local execution.(Citation: Artic Wolf Labs Kali365 Device Code April 2026)(Citation: FBI IC3 Alert I-052126 Kali365 May 2026)(Citation: Huntress Kali365 Device Code June 2026)(Citation: SpyCloud Kali365 June 2026) Kali365 incorporates on-demand device code generation and mirrors the copy-paste execution tradecraft associated with ClickFix. (Citation: Huntress Kali365 Device Code June 2026) Operators have used Kali365 to harvest victims' OAuth tokens and session cookies through adversary-in-the-middle (AiTM) interception, enabling account takeover.(Citation: Artic Wolf Labs Kali365 Device Code April 2026)(Citation: Artic Wolf Kali365 Device Code OAuth June 2026)(Citation: FBI IC3 Alert I-052126 Kali365 May 2026)(Citation: Huntress Kali365 Device Code June 2026)(Citation: SpyCloud Kali365 June 2026) Kali365 PHaaS was first observed in April 2026.(Citation: Artic Wolf Labs Kali365 Device Code April 2026) Kali365 has also been affiliated with other branding to include Octopi365 and Freedom365.(Citation: Huntress Kali365 Device Code June 2026)

[S9043] Mini Shai-Hulud

Current version: 1.0

Description:

Mini Shai-Hulud is a credential stealer and self-replicating supply chain worm, derived from Shai-Hulud, that has been used by TeamPCP to target Continuous Integration and Continuous Delivery/Deployment (CI/CD) workflows since at least 2026. Mini Shai-Hulud can compromise credentials across multiple cloud, container, and AI configuration file paths and can use stolen npm and GitHub OIDC tokens to spread to other packages maintained by the compromised user. Mini Shai-Hulud also has a targeted wiper component and has used multiple C2 and data exfiltration mechanisms.(Citation: Wiz Mini Shai-Hulud MAY 2026)(Citation: Trend Micro TeamPCP MAY 2026)(Citation: Hunt.io TeamPCP Toolkit MAY 2026)(Citation: Phoenix TeamPCP 20 MAY 2026)(Citation: Flashpoint Mini Shai-Hulud MAY 2026)(Citation: FBI TeamPCP JUL 2026)

[S9041] TeamPCP Cloud Stealer

Current version: 1.0

Description:

The TeamPCP Cloud Stealer is a comprehensive filesystem credential stealer that can harvest, encrypt, and exfiltrate credentials from over 50 sensitive file paths across CI/CD, cloud, developer tooling, and container environments. The TeamPCP Cloud Stealer was the primary payload used by TeamPCP in March 2026 during early stages of a cascading supply chain campaign targeting CI/CD workflows.(Citation: Wiz Trivy Compromise MAR 2026)(Citation: Aqua Security Trivy Compromise MAR 2026)(Citation: Aqua Security Blog Trivy Compromise APR 2026)(Citation: Sysdig TeamPCP MAR 2026)(Citation: Wiz TeamPCP KICS MAR 2026)(Citation: Palo Alto TeamPCP MAR 2026)(Citation: Google AI Threat Tracker MAY 2026)(Citation: FBI TeamPCP JUL 2026)

Groups

enterprise-attack

New Groups

[G1057] ShinyHunters

Current version: 1.0

Description:

ShinyHunters is a cyber criminal collective that has been active since at least 2019 operating under the ShinyCorp persona. ShinyHunters has targeted multiple industries and geographic regions gathering legitimate credentials and personally identifiable information (PII) for resale or extortion of victims. ShinyHunters has been associated with the broader collective called The Community, also known as The Com whose members have also included Scattered Spider and LAPSUS$. Public reporting has mentioned a variety of names for operations ShinyHunters members have reportedly conducted with members of other groups, including “Scattered Lapsus Hunters,” “Scattered Lapsus Shiny Hunters,” and “SLSH.”(Citation: ElecticIQ Buyukkaya_ShinyHunters_Sept2025)(Citation: SOCRadar_ShinyHunters_Mar2024)(Citation: Unit42KelleyVaya_BlingLibra_Aug2024)(Citation: Intel471_SH_Aug2021)(Citation: FBI_SHLMS_May2026)(Citation: Google_SHOracle_Jun2026)(Citation: Mandiant_SHDataTheft_Jan2026)(Citation: Google Salesforce JUN 2025)

[G1056] TeamPCP

Current version: 1.0

Description:

TeamPCP is a financially-motivated, cloud-native threat group that has been active since at least September 2025. Initially focused on ransomware and cryptocurrency theft, TeamPCP shifted in early 2026 to systematic, worm-driven credential theft and software supply chain attacks targeting Continuous Integration and Continuous Delivery (CI/CD) workflows. TeamPCP has monetized access through extortion and through partnerships with ransomware actors including Vect and CipherForce.(Citation: Wiz TeamPCP Profile MAY 2026)(Citation: Wiz Trivy Compromise MAR 2026)(Citation: Aqua Security Trivy Compromise MAR 2026)(Citation: Aqua Security Blog Trivy Compromise APR 2026)(Citation: Palo Alto TeamPCP MAR 2026)(Citation: Trend Micro TeamPCP MAY 2026)

Patches

[G1028] APT-C-23

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-11-17 20:01:55.806000+00:00	2026-07-31 20:48:39.666000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0099] APT-C-36

Current version: 2.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-04-23 03:37:06.250000+00:00	2026-07-31 18:48:17.693000+00:00

[G0006] APT1

Current version: 1.4

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-25 14:49:20.672000+00:00	2026-07-31 18:47:59.697000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0005] APT12

Current version: 2.1

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-25 14:49:18.305000+00:00	2026-07-31 18:48:17.463000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0023] APT16

Current version: 1.1

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-16 20:37:41.686000+00:00	2026-07-31 18:48:21.512000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0025] APT17

Current version: 1.1

Details

values_changed
STIX Field	Old value	New Value
modified	2024-11-17 15:03:54.769000+00:00	2026-07-31 18:47:36.723000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0026] APT18

Current version: 2.2

Details

values_changed
STIX Field	Old value	New Value
modified	2024-04-11 03:03:44.056000+00:00	2026-07-31 18:47:50.082000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0073] APT19

Current version: 1.6

Details

values_changed
STIX Field	Old value	New Value
modified	2024-04-11 03:03:02.576000+00:00	2026-07-31 18:48:29.759000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0007] APT28

Current version: 5.3

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 15:12:00.732000+00:00	2026-07-31 20:48:44.067000+00:00

[G0016] APT29

Current version: 6.2

Details

values_changed
STIX Field	Old value	New Value
modified	2026-01-20 16:22:04.140000+00:00	2026-07-31 18:48:06.517000+00:00

[G0022] APT3

Current version: 1.4

Details

values_changed
STIX Field	Old value	New Value
modified	2026-01-20 15:46:53.916000+00:00	2026-07-31 18:47:36.902000+00:00

[G0013] APT30

Current version: 1.1

Details

values_changed
STIX Field	Old value	New Value
modified	2024-11-17 15:05:25.104000+00:00	2026-07-31 18:48:25.451000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0050] APT32

Current version: 3.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-04-17 22:07:49.430000+00:00	2026-07-31 18:47:43.271000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0064] APT33

Current version: 2.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-04-11 16:06:34.700000+00:00	2026-07-31 20:48:52.730000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0067] APT37

Current version: 2.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-11-17 15:01:33.384000+00:00	2026-07-31 18:47:54.407000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0082] APT38

Current version: 3.1

Details

values_changed
STIX Field	Old value	New Value
modified	2025-11-13 19:21:05.133000+00:00	2026-07-31 20:48:22.752000+00:00

[G0087] APT39

Current version: 3.2

Details

values_changed
STIX Field	Old value	New Value
modified	2024-04-11 02:59:52.392000+00:00	2026-07-31 18:47:52.580000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0096] APT41

Current version: 4.2

Details

values_changed
STIX Field	Old value	New Value
modified	2025-06-11 20:13:29.024000+00:00	2026-07-31 20:48:26.542000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1044] APT42

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 15:12:00.732000+00:00	2026-07-31 18:48:15.085000+00:00

[G1023] APT5

Current version: 1.1

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-04 17:08:23.100000+00:00	2026-07-31 18:48:16.107000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1030] Agrius

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-08-29 15:18:44.308000+00:00	2026-07-31 18:48:13.867000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0130] Ajax Security Team

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2023-10-09 16:46:55.719000+00:00	2026-07-31 18:48:27.351000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1024] Akira

Current version: 2.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-03-11 15:36:38.244000+00:00	2026-07-31 18:47:54.331000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0138] Andariel

Current version: 2.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-09-12 18:36:06.078000+00:00	2026-07-31 18:47:50.220000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1007] Aoqin Dragon

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-16 20:37:33.761000+00:00	2026-07-31 18:47:58.829000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1049] AppleJeus

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-10-23 20:42:03.446000+00:00	2026-07-31 18:47:38.399000+00:00

[G0143] Aquatic Panda

Current version: 2.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-10-10 14:31:59.099000+00:00	2026-07-31 18:47:58.464000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0001] Axiom

Current version: 2.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-16 20:37:36.790000+00:00	2026-07-31 18:48:11.488000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1002] BITTER

Current version: 1.1

Details

values_changed
STIX Field	Old value	New Value
modified	2024-04-11 02:52:27.131000+00:00	2026-07-31 20:48:39.235000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0060] BRONZE BUTLER

Current version: 1.3

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-25 14:48:57.719000+00:00	2026-07-31 18:48:09.344000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0135] BackdoorDiplomacy

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-25 14:48:58.613000+00:00	2026-07-31 18:48:10.579000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1043] BlackByte

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-03-09 15:58:36.918000+00:00	2026-07-31 18:47:34.923000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0063] BlackOasis

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-25 14:49:40.224000+00:00	2026-07-31 18:48:22.124000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0098] BlackTech

Current version: 2.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-25 19:03:07.787000+00:00	2026-07-31 18:48:01.102000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0108] Blue Mockingbird

Current version: 1.3

Details

values_changed
STIX Field	Old value	New Value
modified	2024-07-10 18:53:44.277000+00:00	2026-07-31 18:48:01.934000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1012] CURIUM

Current version: 3.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-10-02 12:13:42.278000+00:00	2026-07-31 18:47:50.794000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0008] Carbanak

Current version: 2.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-25 14:49:30.378000+00:00	2026-07-31 18:47:55.855000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0114] Chimera

Current version: 2.2

Details

values_changed
STIX Field	Old value	New Value
modified	2024-09-12 19:24:40.416000+00:00	2026-07-31 20:48:40.932000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1021] Cinnamon Tempest

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-04-04 23:27:22.311000+00:00	2026-07-31 18:48:07.234000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0003] Cleaver

Current version: 1.3

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-16 20:37:38.869000+00:00	2026-07-31 18:48:08.140000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0080] Cobalt Group

Current version: 2.1

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-16 20:37:34.214000+00:00	2026-07-31 18:48:22.149000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0142] Confucius

Current version: 1.1

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-16 20:37:36.476000+00:00	2026-07-31 20:48:37.252000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1052] Contagious Interview

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 15:12:00.732000+00:00	2026-07-31 18:47:53.854000+00:00

[G0052] CopyKittens

Current version: 1.6

Details

values_changed
STIX Field	Old value	New Value
modified	2024-11-17 12:44:07.637000+00:00	2026-07-31 18:48:22.254000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1034] Daggerfly

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-10-31 18:33:10.434000+00:00	2026-07-31 18:48:26.166000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0070] Dark Caracal

Current version: 1.4

Details

values_changed
STIX Field	Old value	New Value
modified	2024-04-11 02:42:07.325000+00:00	2026-07-31 20:48:40.500000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0079] DarkHydrus

Current version: 1.3

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-25 14:49:28.547000+00:00	2026-07-31 20:48:36.928000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0105] DarkVishnya

Current version: 1.1

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-25 14:49:05.248000+00:00	2026-07-31 18:48:04.496000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0012] Darkhotel

Current version: 3.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-01-08 20:27:56.707000+00:00	2026-07-31 18:48:11.260000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0009] Deep Panda

Current version: 1.2

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-16 20:37:39.486000+00:00	2026-07-31 18:48:11.915000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0017] DragonOK

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-11-17 16:27:34.666000+00:00	2026-07-31 18:48:26.131000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0035] Dragonfly

Current version: 4.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-01-08 20:40:31.822000+00:00	2026-07-31 20:48:28.048000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1011] EXOTIC LILY

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-16 20:37:34.060000+00:00	2026-07-31 18:47:37.990000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1006] Earth Lusca

Current version: 2.1

Details

values_changed
STIX Field	Old value	New Value
modified	2025-06-06 14:55:18.144000+00:00	2026-07-31 20:48:47.844000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0066] Elderwood

Current version: 1.3

Details

values_changed
STIX Field	Old value	New Value
modified	2024-11-17 19:55:07.587000+00:00	2026-07-31 18:47:35.392000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1003] Ember Bear

Current version: 2.1

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-25 19:03:38.177000+00:00	2026-07-31 18:48:12.127000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0020] Equation

Current version: 1.2

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-25 14:48:45.400000+00:00	2026-07-31 18:48:10.359000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0120] Evilnum

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-25 14:49:26.766000+00:00	2026-07-31 18:47:41.686000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0051] FIN10

Current version: 1.3

Details

values_changed
STIX Field	Old value	New Value
modified	2024-11-17 14:57:09.164000+00:00	2026-07-31 18:48:28.130000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1016] FIN13

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-01-20 15:10:22.473000+00:00	2026-07-31 18:48:29.757000+00:00

[G0085] FIN4

Current version: 1.2

Details

values_changed
STIX Field	Old value	New Value
modified	2024-11-17 15:57:47.485000+00:00	2026-07-31 20:48:48.493000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0053] FIN5

Current version: 1.2

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-25 14:49:23.588000+00:00	2026-07-31 20:48:39.976000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0037] FIN6

Current version: 4.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-11-17 14:59:25.749000+00:00	2026-07-31 20:48:30.435000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0046] FIN7

Current version: 4.1

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 15:12:00.732000+00:00	2026-07-31 20:48:31.412000+00:00

[G0061] FIN8

Current version: 2.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-16 20:37:35.846000+00:00	2026-07-31 18:48:28.923000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0137] Ferocious Kitten

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-25 14:49:38.455000+00:00	2026-07-31 18:47:58.927000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0117] Fox Kitten

Current version: 2.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 15:12:00.732000+00:00	2026-07-31 18:48:16.208000+00:00

[G0093] GALLIUM

Current version: 4.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-04-17 22:10:27.139000+00:00	2026-07-31 18:47:36.314000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0036] GCMAN

Current version: 1.1

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-25 14:49:37.572000+00:00	2026-07-31 18:47:37.385000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0115] GOLD SOUTHFIELD

Current version: 2.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-16 20:37:38.397000+00:00	2026-07-31 20:48:45.767000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0084] Gallmaker

Current version: 1.1

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-25 14:49:34.304000+00:00	2026-07-31 18:47:47.052000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0047] Gamaredon Group

Current version: 3.3

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 15:12:00.731000+00:00	2026-07-31 18:47:46.487000+00:00

[G0078] Gorgon Group

Current version: 1.5

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 15:12:00.731000+00:00	2026-07-31 18:47:42.035000+00:00

[G0043] Group5

Current version: 1.3

Details

values_changed
STIX Field	Old value	New Value
modified	2024-04-11 02:23:59.598000+00:00	2026-07-31 18:48:01.862000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0125] HAFNIUM

Current version: 3.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-03-25 18:04:13.368000+00:00	2026-07-31 18:47:43.478000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1001] HEXANE

Current version: 2.3

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 15:12:00.732000+00:00	2026-07-31 20:48:51.374000+00:00

[G0126] Higaisa

Current version: 1.2

Details

values_changed
STIX Field	Old value	New Value
modified	2025-10-22 02:54:00.893000+00:00	2026-07-31 18:47:55.735000+00:00

[G1032] INC Ransom

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-10-28 19:03:08.838000+00:00	2026-07-31 20:48:47.333000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0100] Inception

Current version: 1.2

Details

values_changed
STIX Field	Old value	New Value
modified	2024-04-11 02:15:23.096000+00:00	2026-07-31 18:48:24.355000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0136] IndigoZebra

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-25 14:49:40.589000+00:00	2026-07-31 18:48:23.936000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0119] Indrik Spider

Current version: 4.1

Details

values_changed
STIX Field	Old value	New Value
modified	2024-10-28 19:11:56.485000+00:00	2026-07-31 18:47:34.523000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0004] Ke3chang

Current version: 3.1

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-04 17:08:55.617000+00:00	2026-07-31 18:47:59.619000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0094] Kimsuky

Current version: 5.2

Details

values_changed
STIX Field	Old value	New Value
modified	2026-04-23 18:46:50.938000+00:00	2026-07-31 20:48:24.117000+00:00

[G1004] LAPSUS$

Current version: 2.1

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-21 19:40:47.538000+00:00	2026-07-31 20:48:49.009000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0032] Lazarus Group

Current version: 5.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 15:12:00.732000+00:00	2026-07-31 20:48:46.106000+00:00

[G0140] LazyScripter

Current version: 1.1

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 15:12:00.732000+00:00	2026-07-31 18:48:12.417000+00:00

[G0077] Leafminer

Current version: 2.4

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-16 20:37:33.912000+00:00	2026-07-31 18:47:48.258000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0065] Leviathan

Current version: 4.1

Details

values_changed
STIX Field	Old value	New Value
modified	2025-02-03 21:55:54.314000+00:00	2026-07-31 20:48:37.749000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0030] Lotus Blossom

Current version: 4.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-23 21:20:58.367000+00:00	2026-07-31 18:48:06.109000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1014] LuminousMoth

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-16 20:37:32.806000+00:00	2026-07-31 18:48:13.778000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0095] Machete

Current version: 2.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-25 14:49:22.323000+00:00	2026-07-31 18:47:49.445000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0059] Magic Hound

Current version: 6.1

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 15:12:00.732000+00:00	2026-07-31 18:48:27.286000+00:00

[G1026] Malteiro

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-03-29 14:10:35.711000+00:00	2026-07-31 18:48:14.986000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1051] Medusa Group

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-10-24 04:01:48.210000+00:00	2026-07-31 18:48:09.341000+00:00

[G1013] Metador

Current version: 1.1

Details

values_changed
STIX Field	Old value	New Value
modified	2024-04-11 00:46:59.526000+00:00	2026-07-31 18:48:15.057000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1054] MirrorFace

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-04-24 02:22:57.318000+00:00	2026-07-31 18:48:07.598000+00:00

[G0002] Moafee

Current version: 1.1

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-25 14:49:46.105000+00:00	2026-07-31 18:47:46.635000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0103] Mofang

Current version: 1.1

Details

values_changed
STIX Field	Old value	New Value
modified	2024-04-11 00:41:37.453000+00:00	2026-07-31 18:48:06.005000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0021] Molerats

Current version: 2.1

Details

values_changed
STIX Field	Old value	New Value
modified	2024-11-17 15:50:27.600000+00:00	2026-07-31 18:48:22.843000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1036] Moonstone Sleet

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-10-01 11:51:31.065000+00:00	2026-07-31 18:48:24.240000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1009] Moses Staff

Current version: 2.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 15:12:00.732000+00:00	2026-07-31 18:47:55.061000+00:00

[G1019] MoustachedBouncer

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-16 20:37:40.255000+00:00	2026-07-31 20:48:38.550000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0069] MuddyWater

Current version: 7.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 15:12:00.731000+00:00	2026-07-31 20:48:29.347000+00:00

[G0129] Mustang Panda

Current version: 3.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 15:12:00.732000+00:00	2026-07-31 18:47:51.001000+00:00

[G1020] Mustard Tempest

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-03-25 21:23:15.556000+00:00	2026-07-31 18:47:37.053000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0055] NEODYMIUM

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-25 14:49:46.469000+00:00	2026-07-31 18:47:34.711000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0019] Naikon

Current version: 2.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-25 14:49:21.044000+00:00	2026-07-31 18:47:45.049000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0133] Nomadic Octopus

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-16 20:37:36.955000+00:00	2026-07-31 18:48:30.218000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0049] OilRig

Current version: 5.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 15:12:00.732000+00:00	2026-07-31 20:48:34.886000+00:00

[G0071] Orangeworm

Current version: 2.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-04-10 21:33:28.444000+00:00	2026-07-31 18:47:56.740000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0068] PLATINUM

Current version: 1.3

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-25 14:49:07.040000+00:00	2026-07-31 18:48:27.175000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1005] POLONIUM

Current version: 2.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-01-08 21:56:22.594000+00:00	2026-07-31 18:47:57.978000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0056] PROMETHIUM

Current version: 2.1

Details

values_changed
STIX Field	Old value	New Value
modified	2024-04-19 19:35:15.637000+00:00	2026-07-31 20:48:51.011000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

iterable_item_added
STIX Field	Old value	New Value
x_mitre_domains		mobile-attack

[G0040] Patchwork

Current version: 1.7

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 15:12:00.731000+00:00	2026-07-31 20:48:25.895000+00:00

[G0011] PittyTiger

Current version: 1.2

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-25 14:49:38.981000+00:00	2026-07-31 20:48:53.544000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1040] Play

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-10-02 05:37:34.149000+00:00	2026-07-31 18:48:24.924000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0033] Poseidon Group

Current version: 1.1

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-25 14:49:33.223000+00:00	2026-07-31 18:48:04.495000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0024] Putter Panda

Current version: 1.2

Details

values_changed
STIX Field	Old value	New Value
modified	2024-11-17 16:43:16.049000+00:00	2026-07-31 18:47:57.762000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0048] RTM

Current version: 1.1

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-25 14:49:01.288000+00:00	2026-07-31 18:48:16.598000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0075] Rancor

Current version: 1.3

Details

values_changed
STIX Field	Old value	New Value
modified	2024-02-09 19:30:38.407000+00:00	2026-07-31 18:48:26.231000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1039] RedCurl

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-09-23 23:11:00.562000+00:00	2026-07-31 18:48:05.317000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1042] RedEcho

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-03-13 20:54:46.475000+00:00	2026-07-31 18:47:46.134000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0106] Rocke

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-25 14:49:08.821000+00:00	2026-07-31 18:47:51.614000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1031] Saint Bear

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-08-12 17:32:47.430000+00:00	2026-07-31 18:47:59.664000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1045] Salt Typhoon

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-03-06 20:09:16.402000+00:00	2026-07-31 18:47:41.313000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0034] Sandworm Team

Current version: 4.2

Details

values_changed
STIX Field	Old value	New Value
modified	2024-12-04 21:17:08.593000+00:00	2026-07-31 20:48:32.342000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0029] Scarlet Mimic

Current version: 1.2

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-25 14:49:45.222000+00:00	2026-07-31 18:48:17.922000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1015] Scattered Spider

Current version: 3.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-10-24 02:30:51.936000+00:00	2026-07-31 20:48:33.778000+00:00

[G1041] Sea Turtle

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-03-28 15:28:31.727000+00:00	2026-07-31 18:47:56.961000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1008] SideCopy

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-16 20:37:38.248000+00:00	2026-07-31 18:47:36.181000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0121] Sidewinder

Current version: 1.2

Details

values_changed
STIX Field	Old value	New Value
modified	2024-04-11 00:07:05.918000+00:00	2026-07-31 18:47:50.955000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0091] Silence

Current version: 2.2

Details

values_changed
STIX Field	Old value	New Value
modified	2024-11-17 18:19:52.955000+00:00	2026-07-31 18:48:20.506000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0122] Silent Librarian

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-25 14:49:29.613000+00:00	2026-07-31 18:48:08.693000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0083] SilverTerrier

Current version: 1.2

Details

values_changed
STIX Field	Old value	New Value
modified	2023-09-27 20:22:05.127000+00:00	2026-07-31 18:48:02.596000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0054] Sowbug

Current version: 1.1

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-25 14:49:21.603000+00:00	2026-07-31 18:48:20.561000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1033] Star Blizzard

Current version: 2.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 15:12:00.732000+00:00	2026-07-31 20:48:42.370000+00:00

[G0038] Stealth Falcon

Current version: 1.2

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-25 14:49:04.710000+00:00	2026-07-31 18:48:06.436000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1053] Storm-0501

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-10-24 02:33:31.401000+00:00	2026-07-31 18:48:03.011000+00:00

[G1046] Storm-1811

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-03-14 19:17:33.785000+00:00	2026-07-31 18:47:47.257000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0041] Strider

Current version: 1.1

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-25 14:49:43.099000+00:00	2026-07-31 18:47:44.949000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0039] Suckfly

Current version: 1.1

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-16 20:37:33.565000+00:00	2026-07-31 18:47:57.501000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1018] TA2541

Current version: 1.1

Details

values_changed
STIX Field	Old value	New Value
modified	2024-04-10 22:38:45.199000+00:00	2026-07-31 18:47:54.288000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0062] TA459

Current version: 1.1

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-25 14:49:19.743000+00:00	2026-07-31 18:47:58.066000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0092] TA505

Current version: 3.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-01-20 15:50:34.667000+00:00	2026-07-31 18:48:04.495000+00:00

[G0127] TA551

Current version: 1.2

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-16 20:37:36.634000+00:00	2026-07-31 18:48:09.361000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1037] TA577

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-09-17 16:07:34.686000+00:00	2026-07-31 18:47:37.994000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1038] TA578

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-09-17 17:55:58.333000+00:00	2026-07-31 18:48:11.583000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0088] TEMP.Veles

Current version: 1.4

Details

values_changed
STIX Field	Old value	New Value
modified	2024-04-17 16:13:43.697000+00:00	2026-07-31 20:48:41.930000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0139] TeamTNT

Current version: 1.4

Details

values_changed
STIX Field	Old value	New Value
modified	2025-10-22 03:04:28.916000+00:00	2026-07-31 18:47:48.259000+00:00

[G0089] The White Company

Current version: 1.1

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-25 14:49:32.865000+00:00	2026-07-31 18:47:59.296000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0028] Threat Group-1314

Current version: 1.1

Details

values_changed
STIX Field	Old value	New Value
modified	2026-01-20 16:07:46.964000+00:00	2026-07-31 18:48:20.978000+00:00

[G0027] Threat Group-3390

Current version: 3.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-10-15 20:24:59.798000+00:00	2026-07-31 18:48:27.731000+00:00

[G0076] Thrip

Current version: 1.2

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-25 14:49:36.307000+00:00	2026-07-31 18:48:21.405000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1022] ToddyCat

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-02-14 20:35:53.080000+00:00	2026-07-31 18:48:13.519000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0131] Tonto Team

Current version: 1.1

Details

values_changed
STIX Field	Old value	New Value
modified	2024-11-17 16:30:03.375000+00:00	2026-07-31 18:48:18.168000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0134] Transparent Tribe

Current version: 1.2

Details

values_changed
STIX Field	Old value	New Value
modified	2024-04-10 22:30:51.062000+00:00	2026-07-31 18:48:23.430000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0081] Tropic Trooper

Current version: 1.6

Details

values_changed
STIX Field	Old value	New Value
modified	2025-10-21 23:19:38.101000+00:00	2026-07-31 18:47:56.506000+00:00

[G0010] Turla

Current version: 5.1

Details

values_changed
STIX Field	Old value	New Value
modified	2026-01-20 15:11:37.732000+00:00	2026-07-31 18:48:02.956000+00:00

[G1048] UNC3886

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-10-24 03:55:02.289000+00:00	2026-07-31 18:47:52.855000+00:00

[G1055] VOID MANTICORE

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 16:30:18.375000+00:00	2026-07-31 18:48:24.451000+00:00

[G1047] Velvet Ant

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-04 17:24:17.983000+00:00	2026-07-31 18:48:23.128000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0123] Volatile Cedar

Current version: 1.1

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-16 20:37:38.546000+00:00	2026-07-31 18:48:12.835000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1017] Volt Typhoon

Current version: 2.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-04-27 03:57:23.174000+00:00	2026-07-31 18:47:38.941000+00:00

[G0090] WIRTE

Current version: 3.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-04-23 02:15:29.965000+00:00	2026-07-31 20:48:52.082000+00:00

[G1050] Water Galura

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-10-23 21:52:27.774000+00:00	2026-07-31 18:48:14.500000+00:00

[G0107] Whitefly

Current version: 1.2

Details

values_changed
STIX Field	Old value	New Value
modified	2024-04-10 20:43:09.698000+00:00	2026-07-31 18:48:13.766000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0124] Windigo

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-25 14:49:09.909000+00:00	2026-07-31 18:47:55.695000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0112] Windshift

Current version: 1.1

Details

values_changed
STIX Field	Old value	New Value
modified	2024-11-17 14:15:51.850000+00:00	2026-07-31 20:48:43.267000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0044] Winnti Group

Current version: 1.2

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-16 20:37:35.689000+00:00	2026-07-31 18:48:18.078000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1035] Winter Vivern

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-10-10 14:33:40.986000+00:00	2026-07-31 18:48:02.493000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0102] Wizard Spider

Current version: 4.1

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 15:12:00.732000+00:00	2026-07-31 20:48:49.730000+00:00

[G0128] ZIRCONIUM

Current version: 2.3

Details

values_changed
STIX Field	Old value	New Value
modified	2025-10-15 20:39:25.843000+00:00	2026-07-31 18:47:51.321000+00:00

[G0018] admin@338

Current version: 1.2

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-25 14:48:47.886000+00:00	2026-07-31 18:47:38.827000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0045] menuPass

Current version: 3.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 15:12:00.731000+00:00	2026-07-31 18:47:42.898000+00:00

mobile-attack

Patches

[G1028] APT-C-23

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-11-17 20:01:55.806000+00:00	2026-07-31 20:48:39.666000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0007] APT28

Current version: 5.3

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 15:12:00.732000+00:00	2026-07-31 20:48:44.067000+00:00

[G0096] APT41

Current version: 4.2

Details

values_changed
STIX Field	Old value	New Value
modified	2025-06-11 20:13:29.024000+00:00	2026-07-31 20:48:26.542000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1002] BITTER

Current version: 1.1

Details

values_changed
STIX Field	Old value	New Value
modified	2024-04-11 02:52:27.131000+00:00	2026-07-31 20:48:39.235000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0097] Bouncing Golf

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-25 14:41:32.241000+00:00	2026-07-31 20:48:23.673000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0142] Confucius

Current version: 1.1

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-16 20:37:36.476000+00:00	2026-07-31 20:48:37.252000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0070] Dark Caracal

Current version: 1.4

Details

values_changed
STIX Field	Old value	New Value
modified	2024-04-11 02:42:07.325000+00:00	2026-07-31 20:48:40.500000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1006] Earth Lusca

Current version: 2.1

Details

values_changed
STIX Field	Old value	New Value
modified	2025-06-06 14:55:18.144000+00:00	2026-07-31 20:48:47.844000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0094] Kimsuky

Current version: 5.2

Details

values_changed
STIX Field	Old value	New Value
modified	2026-04-23 18:46:50.938000+00:00	2026-07-31 20:48:24.117000+00:00

[G1004] LAPSUS$

Current version: 2.1

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-21 19:40:47.538000+00:00	2026-07-31 20:48:49.009000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1019] MoustachedBouncer

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-16 20:37:40.255000+00:00	2026-07-31 20:48:38.550000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0069] MuddyWater

Current version: 7.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 15:12:00.731000+00:00	2026-07-31 20:48:29.347000+00:00

[G0056] PROMETHIUM

Current version: 2.1

Details

values_changed
STIX Field	Old value	New Value
modified	2024-04-19 19:35:15.637000+00:00	2026-07-31 20:48:51.011000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

iterable_item_added
STIX Field	Old value	New Value
x_mitre_domains		enterprise-attack

[G0040] Patchwork

Current version: 1.7

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 15:12:00.731000+00:00	2026-07-31 20:48:25.895000+00:00

[G0034] Sandworm Team

Current version: 4.2

Details

values_changed
STIX Field	Old value	New Value
modified	2024-12-04 21:17:08.593000+00:00	2026-07-31 20:48:32.342000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1015] Scattered Spider

Current version: 3.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-10-24 02:30:51.936000+00:00	2026-07-31 20:48:33.778000+00:00

[G1033] Star Blizzard

Current version: 2.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 15:12:00.732000+00:00	2026-07-31 20:48:42.370000+00:00

[G1029] UNC788

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-04-02 18:58:54.885000+00:00	2026-07-31 20:48:28.893000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0090] WIRTE

Current version: 3.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-04-23 02:15:29.965000+00:00	2026-07-31 20:48:52.082000+00:00

[G0112] Windshift

Current version: 1.1

Details

values_changed
STIX Field	Old value	New Value
modified	2024-11-17 14:15:51.850000+00:00	2026-07-31 20:48:43.267000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

ics-attack

Patches

[G1000] ALLANITE

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-16 21:26:23.407000+00:00	2026-07-31 20:48:27.733000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0064] APT33

Current version: 2.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-04-11 16:06:34.700000+00:00	2026-07-31 20:48:52.730000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0082] APT38

Current version: 3.1

Details

values_changed
STIX Field	Old value	New Value
modified	2025-11-13 19:21:05.133000+00:00	2026-07-31 20:48:22.752000+00:00

[G1027] CyberAv3ngers

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-04-10 18:39:36.997000+00:00	2026-07-31 20:48:42.789000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0035] Dragonfly

Current version: 4.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-01-08 20:40:31.822000+00:00	2026-07-31 20:48:28.048000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0037] FIN6

Current version: 4.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-11-17 14:59:25.749000+00:00	2026-07-31 20:48:30.435000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0046] FIN7

Current version: 4.1

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 15:12:00.732000+00:00	2026-07-31 20:48:31.412000+00:00

[G0115] GOLD SOUTHFIELD

Current version: 2.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-16 20:37:38.397000+00:00	2026-07-31 20:48:45.767000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G1001] HEXANE

Current version: 2.3

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 15:12:00.732000+00:00	2026-07-31 20:48:51.374000+00:00

[G0032] Lazarus Group

Current version: 5.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 15:12:00.732000+00:00	2026-07-31 20:48:46.106000+00:00

[G0049] OilRig

Current version: 5.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 15:12:00.732000+00:00	2026-07-31 20:48:34.886000+00:00

[G0034] Sandworm Team

Current version: 4.2

Details

values_changed
STIX Field	Old value	New Value
modified	2024-12-04 21:17:08.593000+00:00	2026-07-31 20:48:32.342000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0088] TEMP.Veles

Current version: 1.4

Details

values_changed
STIX Field	Old value	New Value
modified	2024-04-17 16:13:43.697000+00:00	2026-07-31 20:48:41.930000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[G0102] Wizard Spider

Current version: 4.1

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 15:12:00.732000+00:00	2026-07-31 20:48:49.730000+00:00

Campaigns

enterprise-attack

Patches

[C0028] 2015 Ukraine Electric Power Attack

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-12-18 18:59:44.199000+00:00	2026-08-04 20:48:44.047000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

iterable_item_removed
STIX Field	Old value	New Value
x_mitre_domains	mobile-attack

[C0025] 2016 Ukraine Electric Power Attack

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-16 20:37:46.567000+00:00	2026-07-31 21:05:24.494000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

iterable_item_removed
STIX Field	Old value	New Value
x_mitre_domains	mobile-attack

[C0034] 2022 Ukraine Electric Power Attack

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-04-10 16:02:48.078000+00:00	2026-07-31 21:11:04.731000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

iterable_item_removed
STIX Field	Old value	New Value
x_mitre_domains	mobile-attack

[C0063] 2025 Poland Wiper Attacks

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 15:12:00.730000+00:00	2026-07-31 20:48:19.151000+00:00

[C0057] 3CX Supply Chain Attack

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-10-23 18:32:38.121000+00:00	2026-07-31 18:47:21.686000+00:00

[C0051] APT28 Nearest Neighbor Campaign

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 15:12:00.730000+00:00	2026-07-31 21:11:45.365000+00:00

iterable_item_removed
STIX Field	Old value	New Value
x_mitre_domains	mobile-attack

[C0040] APT41 DUST

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-09-21 07:12:01.955000+00:00	2026-07-31 18:47:29.732000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[C0062] Anthropic AI-orchestrated Campaign

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-04-23 23:45:31.444000+00:00	2026-07-31 18:47:23.588000+00:00

[C0046] ArcaneDoor

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-03-10 19:05:59.813000+00:00	2026-07-31 18:47:28.435000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[C0010] C0010

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-16 20:37:46.129000+00:00	2026-07-31 18:47:29.344000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[C0011] C0011

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-16 20:37:47.897000+00:00	2026-07-31 18:47:30.973000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[C0015] C0015

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-16 20:37:46.910000+00:00	2026-07-31 18:47:24.571000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[C0017] C0017

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-16 20:37:47.537000+00:00	2026-07-31 21:12:29.849000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

iterable_item_removed
STIX Field	Old value	New Value
x_mitre_domains	mobile-attack

[C0018] C0018

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-21 19:40:47.537000+00:00	2026-07-31 18:47:22.530000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[C0021] C0021

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-16 20:37:47.096000+00:00	2026-07-31 18:47:23.636000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[C0026] C0026

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2023-09-29 18:06:43.110000+00:00	2026-07-31 18:47:32.005000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[C0027] C0027

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-16 20:37:45.650000+00:00	2026-07-31 18:47:32.962000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[C0032] C0032

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-04-15 21:10:00.969000+00:00	2026-07-31 18:47:25.472000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[C0033] C0033

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-04-11 15:10:14.209000+00:00	2026-07-31 20:48:20.147000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[C0004] CostaRicto

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-16 20:37:46.418000+00:00	2026-07-31 18:47:33.745000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[C0029] Cutting Edge

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-03-28 17:37:05.814000+00:00	2026-07-31 18:47:22.237000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[C0053] FLORAHOX Activity

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-03-27 21:19:26.432000+00:00	2026-07-31 18:47:33.465000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[C0001] Frankenstein

Current version: 1.1

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-16 20:37:47.239000+00:00	2026-07-31 18:47:18.256000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[C0041] FrostyGoop Incident

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-03-05 22:12:26.131000+00:00	2026-07-31 20:48:13.258000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[C0007] FunnyDream

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-16 20:37:45.985000+00:00	2026-07-31 18:47:26.674000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[C0038] HomeLand Justice

Current version: 1.1

Details

values_changed
STIX Field	Old value	New Value
modified	2026-04-23 02:24:58.492000+00:00	2026-07-31 21:13:10.649000+00:00

iterable_item_removed
STIX Field	Old value	New Value
x_mitre_domains	ics-attack

[C0043] Indian Critical Infrastructure Intrusions

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-03-13 20:55:26.608000+00:00	2026-07-31 18:47:21.276000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[C0050] J-magic Campaign

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-02-19 20:00:20.463000+00:00	2026-07-31 18:47:23.400000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[C0044] Juicy Mix

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-11-25 22:05:20.281000+00:00	2026-07-31 21:13:47.266000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

iterable_item_removed
STIX Field	Old value	New Value
x_mitre_domains	ics-attack

[C0035] KV Botnet Activity

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-10-03 10:11:13.072000+00:00	2026-07-31 18:47:16.890000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[C0049] Leviathan Australian Intrusions

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-03-14 12:46:03.740000+00:00	2026-07-31 18:47:32.005000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[C0002] Night Dragon

Current version: 1.1

Details

values_changed
STIX Field	Old value	New Value
modified	2024-04-11 00:36:23.822000+00:00	2026-07-31 18:47:29.891000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[C0060] Operation AkaiRyū

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 15:12:00.730000+00:00	2026-07-31 18:47:26.133000+00:00

[C0012] Operation CuckooBees

Current version: 1.1

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-16 20:37:46.274000+00:00	2026-07-31 18:47:27.459000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[C0061] Operation Digital Eye

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-04-24 02:28:18.653000+00:00	2026-07-31 18:47:23.901000+00:00

[C0022] Operation Dream Job

Current version: 1.2

Details

values_changed
STIX Field	Old value	New Value
modified	2024-04-11 00:31:21.576000+00:00	2026-07-31 21:14:21.859000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

iterable_item_removed
STIX Field	Old value	New Value
x_mitre_domains	ics-attack

[C0016] Operation Dust Storm

Current version: 1.1

Details

values_changed
STIX Field	Old value	New Value
modified	2024-04-11 00:30:42.003000+00:00	2026-07-31 20:48:14.337000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[C0023] Operation Ghost

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-16 20:37:47.386000+00:00	2026-07-31 18:47:24.650000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[C0006] Operation Honeybee

Current version: 1.1

Details

values_changed
STIX Field	Old value	New Value
modified	2024-04-11 00:30:09.195000+00:00	2026-07-31 18:47:19.919000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[C0048] Operation MidnightEclipse

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-01-15 23:25:55.678000+00:00	2026-07-31 18:47:20.105000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[C0013] Operation Sharpshooter

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-16 20:37:47.743000+00:00	2026-07-31 18:47:19.685000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[C0005] Operation Spalax

Current version: 1.1

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 15:12:00.730000+00:00	2026-07-31 18:47:21.598000+00:00

[C0014] Operation Wocao

Current version: 1.2

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 15:12:00.730000+00:00	2026-07-31 18:47:30.910000+00:00

[C0042] Outer Space

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-11-25 22:07:13.513000+00:00	2026-07-31 21:15:08.800000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

iterable_item_removed
STIX Field	Old value	New Value
x_mitre_domains	ics-attack

[C0036] Pikabot Distribution February 2024

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-10-28 19:02:07.114000+00:00	2026-07-31 18:47:25.913000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[C0055] Quad7 Activity

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-10-24 03:37:52.324000+00:00	2026-07-31 18:47:33.282000+00:00

[C0047] RedDelta Modified PlugX Infection Chain Operations

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-02 15:50:35.356000+00:00	2026-07-31 18:47:18.644000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[C0056] RedPenguin

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 15:12:00.729000+00:00	2026-07-31 18:47:19.448000+00:00

[C0052] SPACEHOP Activity

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-03-27 21:18:00.302000+00:00	2026-07-31 18:47:26.080000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[C0059] Salesforce Data Exfiltration

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-10-24 04:09:52.046000+00:00	2026-07-31 20:48:17.935000+00:00

[C0045] ShadowRay

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-12-02 22:01:07.830000+00:00	2026-07-31 18:47:22.958000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[C0058] SharePoint ToolShell Exploitation

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-04-23 18:46:50.936000+00:00	2026-07-31 18:47:16.890000+00:00

[C0024] SolarWinds Compromise

Current version: 1.1

Details

values_changed
STIX Field	Old value	New Value
modified	2025-09-19 15:16:28.463000+00:00	2026-07-31 18:47:25.784000+00:00

[C0030] Triton Safety Instrumented System Attack

Current version: 1.1

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 15:12:00.729000+00:00	2026-07-31 20:48:13.868000+00:00

[C0039] Versa Director Zero Day Exploitation

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-09-28 09:54:33.751000+00:00	2026-07-31 18:47:29.960000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[C0037] Water Curupira Pikabot Distribution

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 15:12:00.730000+00:00	2026-07-31 18:47:22.789000+00:00

mobile-attack

Patches

[C0033] C0033

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-04-11 15:10:14.209000+00:00	2026-07-31 20:48:20.147000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[C0016] Operation Dust Storm

Current version: 1.1

Details

values_changed
STIX Field	Old value	New Value
modified	2024-04-11 00:30:42.003000+00:00	2026-07-31 20:48:14.337000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[C0054] Operation Triangulation

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-03-28 15:23:16.915000+00:00	2026-07-31 20:48:21.820000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

ics-attack

Patches

[C0028] 2015 Ukraine Electric Power Attack

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-12-18 18:59:44.199000+00:00	2026-08-04 20:48:44.047000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[C0025] 2016 Ukraine Electric Power Attack

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-16 20:37:46.567000+00:00	2026-07-31 21:05:24.494000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

iterable_item_removed
STIX Field	Old value	New Value
x_mitre_domains	mobile-attack

[C0034] 2022 Ukraine Electric Power Attack

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-04-10 16:02:48.078000+00:00	2026-07-31 21:11:04.731000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

iterable_item_removed
STIX Field	Old value	New Value
x_mitre_domains	mobile-attack

[C0063] 2025 Poland Wiper Attacks

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 15:12:00.730000+00:00	2026-07-31 20:48:19.151000+00:00

[C0041] FrostyGoop Incident

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-03-05 22:12:26.131000+00:00	2026-07-31 20:48:13.258000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[C0020] Maroochy Water Breach

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2025-04-16 21:26:23.900000+00:00	2026-07-31 20:48:15.915000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

[C0030] Triton Safety Instrumented System Attack

Current version: 1.1

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 15:12:00.729000+00:00	2026-07-31 20:48:13.868000+00:00

[C0031] Unitronics Defacement Campaign

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2024-04-15 19:37:46.084000+00:00	2026-07-31 20:48:17.564000+00:00
x_mitre_attack_spec_version	3.2.0	3.3.0

Detection Strategies

enterprise-attack

Patches

[DET0187] Detect Disabled Windows Event Log

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 16:30:18.390000+00:00	2026-07-31 18:48:38.565000+00:00

[DET0899] Detect Social Engineering

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 16:30:18.390000+00:00	2026-07-31 18:48:33.947000+00:00

[DET0901] Detect Windows Firewall

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 16:30:18.390000+00:00	2026-07-31 18:48:33.686000+00:00

[DET0563] Detection Strategy for Defense Impairment via Prevent Command History Logging across OS platforms.

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 16:30:18.390000+00:00	2026-07-31 18:48:36.110000+00:00

[DET0289] Detection Strategy for Disable or Modify Cloud Log

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 16:30:18.391000+00:00	2026-07-31 18:48:39.906000+00:00

[DET0062] Detection Strategy for Disable or Modify Linux Audit System Log

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 16:30:18.390000+00:00	2026-07-31 18:48:31.788000+00:00

[DET0595] Detection Strategy for Exploitation for Stealth

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 16:30:18.391000+00:00	2026-07-31 18:48:38.827000+00:00

[DET0920] Detection Strategy for Invisible Unicode

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 16:30:18.391000+00:00	2026-07-31 18:48:39.114000+00:00

[DET0311] Detection for Spoofing Tool UI across OS Platforms

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 16:30:18.391000+00:00	2026-07-31 18:48:40.729000+00:00

[DET0918] Detection of Audio-Visual Content

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 16:30:18.390000+00:00	2026-07-31 18:48:36.948000+00:00

[DET0900] Detection of Defense Impairment

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 16:30:18.390000+00:00	2026-07-31 18:48:33.407000+00:00

[DET0497] Detection of Defense Impairment through Disabled or Modified Tools across OS Platforms.

Current version: 1.1

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 16:30:18.390000+00:00	2026-07-31 18:48:36.649000+00:00

[DET0916] Detection of Generate Content

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 16:30:18.390000+00:00	2026-07-31 18:48:35.317000+00:00

[DET0919] Detection of Query Public AI Services

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 16:30:18.391000+00:00	2026-07-31 18:48:39.378000+00:00

[DET0588] Detection of Remote Service Session Hijacking for RDP.

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 16:30:18.390000+00:00	2026-07-31 18:48:32.069000+00:00

[DET0897] Detection of Selective Exclusion

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 16:34:50.682000+00:00	2026-07-31 18:48:35.846000+00:00

[DET0898] Detection of Spoofed User-Agent

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 16:34:50.688000+00:00	2026-07-31 18:48:37.215000+00:00

[DET0306] Detection of Unauthorized Network Firewall Rule Modification

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 16:30:18.390000+00:00	2026-07-31 18:48:33.141000+00:00

[DET0917] Detection of Written Content

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 16:30:18.390000+00:00	2026-07-31 18:48:37.492000+00:00

ics-attack

Patches

[DET0748] Detection of Autorun Image

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 16:30:18.390000+00:00	2026-07-31 20:48:56.122000+00:00

[DET0910] Detection of Block Communications

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 16:30:18.390000+00:00	2026-07-31 20:48:57.028000+00:00

[DET0911] Detection of Block Ethernet

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 16:30:18.391000+00:00	2026-07-31 20:48:57.971000+00:00

[DET0903] Detection of Block Operational Technology Message

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 16:30:18.390000+00:00	2026-07-31 20:48:55.497000+00:00

[DET0912] Detection of Block Wi-Fi

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 16:30:18.390000+00:00	2026-07-31 20:48:54.649000+00:00

[DET0908] Detection of Broadcast Discovery

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 16:30:18.390000+00:00	2026-07-31 20:48:56.771000+00:00

[DET0904] Detection of Firmware Modification

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 16:30:18.390000+00:00	2026-07-31 20:48:55.817000+00:00

[DET0905] Detection of Insecure Credentials

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 16:30:18.391000+00:00	2026-07-31 20:48:58.228000+00:00

[DET0909] Detection of Multicast Discovery

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 16:30:18.390000+00:00	2026-07-31 20:48:54.962000+00:00

[DET0915] Detection of Online Edit

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 16:30:18.390000+00:00	2026-07-31 20:48:56.515000+00:00

[DET0907] Detection of Port Scan

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 16:30:18.390000+00:00	2026-07-31 20:48:55.220000+00:00

[DET0914] Detection of Program Append

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 16:30:18.391000+00:00	2026-07-31 20:48:57.455000+00:00

[DET0913] Detection of Program Download All

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 16:30:18.390000+00:00	2026-07-31 20:48:54.007000+00:00

[DET0906] Detection of Siemens Project File Format Infection

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 16:30:18.390000+00:00	2026-07-31 20:48:54.264000+00:00

[DET0902] Detection of Unauthorized Message

Current version: 1.0

Details

values_changed
STIX Field	Old value	New Value
modified	2026-05-12 16:30:18.391000+00:00	2026-07-31 20:48:57.712000+00:00