Pony
Software · ATTACK:enterprise:S0453
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S0453",
"title": "Pony",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0453",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--222ba512-32d9-49ac-aefd-50ce981ce2ce",
"external_id": "S0453",
"domain": "enterprise",
"created": "2020-05-21T21:03:35.244Z",
"modified": "2025-04-25T14:42:50.153Z",
"version": "1.0",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "Malwarebytes Pony April 2016",
"url": "https://blog.malwarebytes.com/threat-analysis/2015/11/no-money-but-pony-from-a-mail-to-a-trojan-horse/"
}
]
}Explicit source assertions (16)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S0453 → uses → ATTACK:enterprise:T1106
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--02075984-9bec-465e-8a21-6717b9a1308b
Malwarebytes Pony April 2016ATTACK:enterprise:S0453 → uses → ATTACK:enterprise:T1204.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0d1cb122-5195-4d04-b5c9-85f4747886fa
Malwarebytes Pony April 2016ATTACK:enterprise:S0453 → uses → ATTACK:enterprise:T1027.015
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1927ea49-6d20-49d3-abf2-95e9122bf332
Malwarebytes Pony April 2016ATTACK:enterprise:S0453 → uses → ATTACK:enterprise:T1036
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--237cd65a-e30e-4f8a-9822-f50b818e1491
Malwarebytes Pony April 2016ATTACK:enterprise:S0453 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3ea6e72b-3d19-4864-aebd-cc31dad7d519
Malwarebytes Pony April 2016ATTACK:enterprise:S0453 → uses → ATTACK:enterprise:T1059.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--404f482d-160d-47ea-9eff-5ca7392eb5b2
Malwarebytes Pony April 2016ATTACK:enterprise:S0453 → uses → ATTACK:enterprise:T1027.016
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4b2fa1ed-6c4f-4974-a44e-beeadf3a887c
Malwarebytes Pony April 2016ATTACK:enterprise:S0453 → uses → ATTACK:enterprise:T1566.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5853ff4e-9982-4d66-bf98-6c22fa42f305
Malwarebytes Pony April 2016ATTACK:enterprise:S0453 → uses → ATTACK:enterprise:T1082
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8dd83463-b0cb-46e9-a01a-b22c6780066f
Malwarebytes Pony April 2016ATTACK:enterprise:S0453 → uses → ATTACK:enterprise:T1497.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8f5e9158-1abe-4ed7-8a0a-df07f629aac8
Malwarebytes Pony April 2016ATTACK:enterprise:S0453 → uses → ATTACK:enterprise:T1204.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a0b2b4b4-c522-4428-a70b-ad1002417a28
Malwarebytes Pony April 2016ATTACK:enterprise:S0453 → uses → ATTACK:enterprise:T1071.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a6dd4567-92ac-47e3-9688-2d555c239705
Malwarebytes Pony April 2016ATTACK:enterprise:S0453 → uses → ATTACK:enterprise:T1566.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cbdb211a-2772-4905-99f1-0415fb0738b3
Malwarebytes Pony April 2016ATTACK:enterprise:S0453 → uses → ATTACK:enterprise:T1087.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d5ecfa68-2027-4dd5-adf0-1eb82463cfc5
Malwarebytes Pony April 2016ATTACK:enterprise:S0453 → uses → ATTACK:enterprise:T1110.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--dd8d683a-0c17-448f-b604-105e130f4b04
Malwarebytes Pony April 2016ATTACK:enterprise:S0453 → uses → ATTACK:enterprise:T1070.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f2810da3-1a6f-4c48-826d-929bde7f7af3
Malwarebytes Pony April 2016