LOWBALL

Malware & Tools · LOWBALL

· MalwareS0042 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

LOWBALL is malware used by admin@338. It was used in August 2015 in email messages targeting Hong Kong-based media organizations. (Citation: FireEye admin@338)

Tactic Coverage

command and control (3)

Used By (1 groups)

G0018admin@338

Techniques (3)

T1071.001Web Protocols

command and control

T1102.002Bidirectional Communication

command and control

T1105Ingress Tool Transfer

command and control

References

https://attack.mitre.org/software/S0042 https://www.fireeye.com/blog/threat-research/2015/11/china-based-threat.html