aol.pm

PLATINUM

IntrusionSet · ATTACK:enterprise:G0068

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:enterprise:G0068",
  "title": "PLATINUM",
  "type": "IntrusionSet",
  "source_url": "https://attack.mitre.org/groups/G0068",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "intrusion-set--f9c06633-dcff-48a1-8588-759e7cec5694",
  "external_id": "G0068",
  "domain": "enterprise",
  "created": "2018-04-18T17:59:24.739Z",
  "modified": "2026-07-31T18:48:27.175Z",
  "version": "1.3",
  "aliases": [
    "PLATINUM"
  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "PLATINUM"
    },
    {
      "source_name": "Microsoft PLATINUM April 2016",
      "url": "https://download.microsoft.com/download/2/2/5/225BFE3E-E1DE-4F5B-A77B-71200928D209/Platinum%20feature%20article%20-%20Targeted%20attacks%20in%20South%20and%20Southeast%20Asia%20April%202016.pdf"
    }
  ]
}

Explicit source assertions (14)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:G0068 → uses → ATTACK:enterprise:T1189

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0583724d-7778-42ed-995c-acad526db4ba

Microsoft PLATINUM April 2016

ATTACK:enterprise:G0068 → uses → ATTACK:enterprise:S0201

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0b7d2d81-0d74-4365-a8ca-d70974c84a57

Microsoft PLATINUM April 2016

ATTACK:enterprise:G0068 → uses → ATTACK:enterprise:T1105

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1255a34c-e280-4b16-b606-7b03682cd76d

Microsoft PLATINUM June 2017

ATTACK:enterprise:G0068 → uses → ATTACK:enterprise:T1204.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--3350f278-af37-4183-b1be-8d79abce27ac

Microsoft PLATINUM April 2016

ATTACK:enterprise:G0068 → uses → ATTACK:enterprise:T1068

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--3d4737ca-bd18-4628-b453-9aed3f555c13

Microsoft PLATINUM April 2016

ATTACK:enterprise:G0068 → uses → ATTACK:enterprise:T1056.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4ebc7501-9471-4f37-92e1-8711073bd062

Microsoft PLATINUM April 2016

ATTACK:enterprise:G0068 → uses → ATTACK:enterprise:S0200

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--6f6d6ccc-ac71-42b6-ab14-d02914d05717

Microsoft PLATINUM April 2016

ATTACK:enterprise:G0068 → uses → ATTACK:enterprise:T1056.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8ba987a9-3a03-4996-8fb7-80f34a35f406

Microsoft PLATINUM April 2016

ATTACK:enterprise:G0068 → uses → ATTACK:enterprise:T1003.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a14c4d34-5a27-419a-b665-e1207ba55ca7

Microsoft PLATINUM April 2016

ATTACK:enterprise:G0068 → uses → ATTACK:enterprise:T1095

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c83da269-9c77-4941-bf69-8e79bdfa5edf

Microsoft PLATINUM June 2017

ATTACK:enterprise:G0068 → uses → ATTACK:enterprise:T1055

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ca429946-3c81-4773-8254-108dbdbb9da9

Microsoft PLATINUM April 2016

ATTACK:enterprise:G0068 → uses → ATTACK:enterprise:T1566.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e797fcd8-4ad6-43d3-a36a-3c05d0ce8832

Microsoft PLATINUM April 2016

ATTACK:enterprise:G0068 → uses → ATTACK:enterprise:S0202

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ebd51f84-cd09-4b40-88bd-bed2461996d7

Microsoft PLATINUM April 2016

ATTACK:enterprise:G0068 → uses → ATTACK:enterprise:T1036

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f3b19f07-d8a9-4aca-a649-039024997a4f

Twitter ItsReallyNick Platinum Masquerade

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.