campaigns C0036 — Search

US Command and Scripting Interpreter: PowerShell, Sub-technique T1059.001 - Enterprise | MITRE ATT&CK®

https://attack.mitre.org/versions/v17/techniques/T1059/001

…s: Breaking Down TA505 Group’s Use of HTML, RATs and Other Techniques in Latest Campaigns. Retrieved May 29, 2020. Ilascu, I. (2020, December 14). Hacking group’s new malware abuses Google and Facebook services. Retrieved December 28, 2020. Cristian Souza, Eduardo Ovalle, Ashley …

2026-04-24 15:14 View archive →

US Phishing: Spearphishing Link, Sub-technique T1566.002 - Enterprise | MITRE ATT&CK®

https://attack.mitre.org/versions/v17/techniques/T1566/002

… deliver malware. [30] S1039 Bumblebee Bumblebee has been spread through e-mail campaigns with malicious links. [31] [32] C0011 C0011 During C0011 Transparent Tribe sent emails containing a malicious link to student targets in India. [33] C0021 C0021 During C0021 , the threat act…

2026-04-24 14:37 View archive →

US Command and Scripting Interpreter: PowerShell, Sub-technique T1059.001 - Enterprise | MITRE ATT&CK®

https://attack.mitre.org/versions/v16/techniques/T1059/001

…, run a reverse shell, and execute malware on the victim's machine. [197] [198] C0036 Pikabot Distribution February 2024 Pikabot Distribution February 2024 passed execution from obfuscated JavaScript files to PowerShell scripts to download and install Pikabot . [199] S0517 Pillow…

2026-04-25 18:59 View archive →

US Command and Scripting Interpreter: PowerShell, Sub-technique T1059.001 - Enterprise | MITRE ATT&CK®

https://attack.mitre.org/techniques/T1059/001

…, run a reverse shell, and execute malware on the victim's machine. [227] [228] C0036 Pikabot Distribution February 2024 Pikabot Distribution February 2024 passed execution from obfuscated JavaScript files to PowerShell scripts to download and install Pikabot . [229] S0517 Pillow…

2026-04-25 11:53 View archive →