ATT&CK v12 is now live! Check out the updates here
SOFTWARE
SOFTWARE
A-B
C-D
E-F
G-H
I-J
K-L
M-N
O-P
Q-R
S-T
U-V
W-X
Zeroaccess
Zeroaccess is a kernel-mode Rootkit that attempts to add victims to the ZeroAccess botnet, often for monetary gain. [1]
ID: S0027
ⓘ
Type: MALWARE
Version: 1.0
Created: 31 May 2017
Last Modified: 17 October 2018
Techniques Used
| Domain | ID | Name | Use | |
|---|---|---|---|---|
| Enterprise | T1564 | .004 | Hide Artifacts: NTFS File Attributes |
Some variants of the Zeroaccess Trojan have been known to store data in Extended Attributes.[2] |
| Enterprise | T1014 | Rootkit |
Zeroaccess is a kernel-mode rootkit.[1] |
|
References
×