aol.pm

ShadowRay

Campaign · ATTACK:enterprise:C0045

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:enterprise:C0045",
  "title": "ShadowRay",
  "type": "Campaign",
  "source_url": "https://attack.mitre.org/campaigns/C0045",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "campaign--57899965-b171-48ed-bbb4-8faffa3d836a",
  "external_id": "C0045",
  "domain": "enterprise",
  "created": "2024-12-02T19:35:14.473Z",
  "modified": "2026-07-31T18:47:22.958Z",
  "version": "1.0",
  "aliases": [
    "ShadowRay"
  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "Oligo ShadowRay Campaign MAR 2024",
      "url": "https://www.oligo.security/blog/shadowray-attack-ai-workloads-actively-exploited-in-the-wild"
    }
  ]
}

Explicit source assertions (10)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:C0045 → uses → ATTACK:enterprise:T1190

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0beabd79-c7a6-449b-806b-c50979cbc3d7

Oligo ShadowRay Campaign MAR 2024

ATTACK:enterprise:C0045 → uses → ATTACK:enterprise:T1027.013

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--153487c1-62aa-4465-8f8a-61674796df69

Oligo ShadowRay Campaign MAR 2024

ATTACK:enterprise:C0045 → uses → ATTACK:enterprise:T1003.008

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--3f175143-5655-4017-8e93-305f903d143f

Oligo ShadowRay Campaign MAR 2024

ATTACK:enterprise:C0045 → uses → ATTACK:enterprise:T1546.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5fc5853a-6936-4a4c-bd3b-5e961bffb6c2

Oligo ShadowRay Campaign MAR 2024

ATTACK:enterprise:C0045 → uses → ATTACK:enterprise:T1588.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7e2a54af-5e8f-4431-810d-7fcaa4c1eca0

Oligo ShadowRay Campaign MAR 2024

ATTACK:enterprise:C0045 → uses → ATTACK:enterprise:T1105

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9ef645f2-0d90-45e8-bf8f-1c1f6b244c2e

Oligo ShadowRay Campaign MAR 2024

ATTACK:enterprise:C0045 → uses → ATTACK:enterprise:T1059.006

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c4d89012-734f-472c-9e07-f99fcdcf7077

Oligo ShadowRay Campaign MAR 2024

ATTACK:enterprise:C0045 → uses → ATTACK:enterprise:T1016

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d1b967b3-3b02-4b35-8b91-520e17fb7f52

Oligo ShadowRay Campaign MAR 2024

ATTACK:enterprise:C0045 → uses → ATTACK:enterprise:T1068

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--dd6e1e11-1022-4a67-9a4d-197a9dcf14dc

Oligo ShadowRay Campaign MAR 2024

ATTACK:enterprise:C0045 → uses → ATTACK:enterprise:T1496.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f503a9ba-4761-4932-8ebc-53b03680a316

Oligo ShadowRay Campaign MAR 2024

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.