Proxysvc
Software · ATTACK:enterprise:S0238
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S0238",
"title": "Proxysvc",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0238",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--069af411-9b24-4e85-b26c-623d035bbe84",
"external_id": "S0238",
"domain": "enterprise",
"created": "2018-10-17T00:14:20.652Z",
"modified": "2025-10-22T03:00:39.798Z",
"version": "1.3",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "Proxysvc"
},
{
"source_name": "McAfee GhostSecret",
"url": "https://securingtomorrow.mcafee.com/mcafee-labs/analyzing-operation-ghostsecret-attack-seeks-to-steal-data-worldwide/"
}
]
}Explicit source assertions (16)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S0238 → uses → ATTACK:enterprise:T1005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--066d9d0e-0298-420b-ba84-a4af07211a35
McAfee GhostSecretATTACK:enterprise:G0032 → uses → ATTACK:enterprise:S0238
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--09c957e3-f89b-4b41-93af-bde08f00ce36
McAfee GhostSecretATTACK:enterprise:S0238 → uses → ATTACK:enterprise:T1071.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1be07482-c5ed-42f9-8be1-5dbb44152461
McAfee GhostSecretATTACK:enterprise:S0238 → uses → ATTACK:enterprise:T1070.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3cf1b188-99ad-48a5-bce8-962eef956ec8
McAfee GhostSecretATTACK:enterprise:S0238 → uses → ATTACK:enterprise:T1119
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4ed42682-d3ad-4a4f-8576-ccdf28ce642b
McAfee GhostSecretATTACK:enterprise:S0238 → uses → ATTACK:enterprise:T1569.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5d6984fc-52cb-429b-9e68-64e656d9ad30
McAfee GhostSecretATTACK:enterprise:S0238 → uses → ATTACK:enterprise:T1680
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7224a7bb-225c-484a-9481-d3a0cb328b32
McAfee GhostSecretATTACK:enterprise:S0238 → uses → ATTACK:enterprise:T1083
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--77270a5a-c2e7-4cf0-8d73-129758454bcc
McAfee GhostSecretATTACK:enterprise:S0238 → uses → ATTACK:enterprise:T1082
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--960bdedf-dcca-4a9b-aa12-358324565470
McAfee GhostSecretATTACK:enterprise:S0238 → uses → ATTACK:enterprise:T1057
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c407e138-4e68-46e9-b41d-4447a282a1fd
McAfee GhostSecretATTACK:enterprise:S0238 → uses → ATTACK:enterprise:T1041
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c621754d-39c0-4ed4-96d2-6f47e8263aea
McAfee GhostSecretATTACK:enterprise:S0238 → uses → ATTACK:enterprise:T1012
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c8bf1e63-1275-46c7-b378-b4a3cc3eb369
McAfee GhostSecretATTACK:enterprise:S0238 → uses → ATTACK:enterprise:T1016
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d4d12441-c588-47f2-9751-8a86a867a185
McAfee GhostSecretATTACK:enterprise:S0238 → uses → ATTACK:enterprise:T1124
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d8427910-3c8f-4633-966f-e1a2a8d7c31c
McAfee GhostSecretATTACK:enterprise:S0238 → uses → ATTACK:enterprise:T1059.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--deae71f8-d849-484f-b49d-757356e195c5
McAfee GhostSecretATTACK:enterprise:S0238 → uses → ATTACK:enterprise:T1485
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f0c53ce3-a265-4da9-a553-c5f2faffa5b8
McAfee GhostSecret