Operation Sharpshooter is the name of a cyber espionage campaign discovered in October 2018 targeting nuclear, defense, energy, and financial companies. Though overlaps between this adversary and Lazarus Group have been noted, definitive links have not been established.
|Enterprise||T1547||.001||Boot or Logon Autostart Execution: Registry Run Keys / Startup Folder|
|Enterprise||T1059||.005||Command and Scripting Interpreter: Visual Basic|
|Enterprise||T1105||Ingress Tool Transfer|
|Enterprise||T1559||.002||Inter-Process Communication: Dynamic Data Exchange|
|Enterprise||T1566||.001||Phishing: Spearphishing Attachment|
|Enterprise||T1204||.002||User Execution: Malicious File|