ZeroT
Software · ATTACK:enterprise:S0230
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S0230",
"title": "ZeroT",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0230",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--4ab44516-ad75-4e43-a280-705dc0420e2f",
"external_id": "S0230",
"domain": "enterprise",
"created": "2018-04-18T17:59:24.739Z",
"modified": "2024-04-10T20:32:14.510Z",
"version": "1.2",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "ZeroT"
},
{
"source_name": "Proofpoint TA459 April 2017",
"url": "https://www.proofpoint.com/us/threat-insight/post/apt-targets-financial-analysts"
},
{
"source_name": "Proofpoint ZeroT Feb 2017",
"url": "https://www.proofpoint.com/us/threat-insight/post/APT-targets-russia-belarus-zerot-plugx"
}
]
}Explicit source assertions (14)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S0230 → uses → ATTACK:enterprise:T1140
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--026a63ae-dd3d-4ea6-8a32-c40c9b37b893
Proofpoint ZeroT Feb 2017ATTACK:enterprise:S0230 → uses → ATTACK:enterprise:T1548.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1c395bb3-3b16-422f-bb00-9048b67b2337
Proofpoint ZeroT Feb 2017ATTACK:enterprise:S0230 → uses → ATTACK:enterprise:T1543.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1d3c31c2-6756-483a-8aee-736bac591c1a
Proofpoint ZeroT Feb 2017ATTACK:enterprise:S0230 → uses → ATTACK:enterprise:T1027.016
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--47df35dd-7d45-452d-af46-d04348a6b363
Proofpoint ZeroT Feb 2017ATTACK:enterprise:S0230 → uses → ATTACK:enterprise:T1574.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4a4664c1-47dd-4a4a-ab7b-0f64ec137a67
Proofpoint TA459 April 2017 · Proofpoint ZeroT Feb 2017ATTACK:enterprise:S0230 → uses → ATTACK:enterprise:T1016
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5d818f5b-6145-4d8f-9be2-2d12fc1f71f1
Proofpoint ZeroT Feb 2017ATTACK:enterprise:S0230 → uses → ATTACK:enterprise:T1082
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7bb2d594-36dc-458d-9f9b-8a3df42fac67
Proofpoint ZeroT Feb 2017ATTACK:enterprise:S0230 → uses → ATTACK:enterprise:T1001.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--84f88ed3-28fe-4936-8ea2-2d4f6d015c0c
Proofpoint TA459 April 2017 · Proofpoint ZeroT Feb 2017ATTACK:enterprise:G0062 → uses → ATTACK:enterprise:S0230
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9a29dd75-31b1-4385-beb9-e093851849f6
Proofpoint TA459 April 2017ATTACK:enterprise:S0230 → uses → ATTACK:enterprise:T1071.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a549ccf7-8610-4cf8-80d7-98491566c0cd
Proofpoint TA459 April 2017 · Proofpoint ZeroT Feb 2017ATTACK:enterprise:S0230 → uses → ATTACK:enterprise:T1027.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b703258a-ea4b-4778-9b98-b053bd16a959
Proofpoint ZeroT Feb 2017ATTACK:enterprise:S0230 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--bff3220c-6fea-4925-a9d0-46f06efb7337
Proofpoint ZeroT Feb 2017ATTACK:enterprise:S0230 → uses → ATTACK:enterprise:T1573.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cf8f6cd4-cd87-430b-b286-3790c5a97efa
Proofpoint TA459 April 2017 · Proofpoint ZeroT Feb 2017ATTACK:enterprise:S0230 → uses → ATTACK:enterprise:T1027.013
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--fee82671-3bba-48c7-bef8-63b2b2bb0fa7
Proofpoint ZeroT Feb 2017