RIPTIDE
ID: S0003
ⓘ
Type: MALWARE
ⓘ
Platforms: Windows
Version: 1.1
Created: 31 May 2017
Last Modified: 30 March 2020
Techniques Used
| Domain | ID | Name | Use | |
|---|---|---|---|---|
| Enterprise | T1071 | .001 | Application Layer Protocol: Web Protocols |
APT12 has used RIPTIDE, a RAT that uses HTTP to communicate.[1] |
| Enterprise | T1573 | .001 | Encrypted Channel: Symmetric Cryptography |
APT12 has used the RIPTIDE RAT, which communicates over HTTP with a payload encrypted with RC4.[1] |