CookieMiner
Software · ATTACK:enterprise:S0492
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S0492",
"title": "CookieMiner",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0492",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--eedc01d5-95e6-4d21-bcd4-1121b1df4586",
"external_id": "S0492",
"domain": "enterprise",
"created": "2020-07-22T19:00:00.779Z",
"modified": "2025-04-16T20:38:42.106Z",
"version": "1.1",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "Unit42 CookieMiner Jan 2019",
"url": "https://unit42.paloaltonetworks.com/mac-malware-steals-cryptocurrency-exchanges-cookies/"
}
]
}Explicit source assertions (14)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S0492 → uses → ATTACK:enterprise:T1555.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--19bfa4e1-509b-417a-9bcc-b739f7d798a7
Unit42 CookieMiner Jan 2019ATTACK:enterprise:S0492 → uses → ATTACK:enterprise:T1048.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--22d01548-0512-4acb-a386-51ec7a822329
Unit42 CookieMiner Jan 2019ATTACK:enterprise:S0492 → uses → ATTACK:enterprise:T1496.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--46af303d-51d3-4b85-90e2-ee75f62c022c
Unit42 CookieMiner Jan 2019ATTACK:enterprise:S0492 → uses → ATTACK:enterprise:T1539
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--474e148d-4f4a-41d4-994e-d6425c7445f3
Unit42 CookieMiner Jan 2019ATTACK:enterprise:S0492 → uses → ATTACK:enterprise:T1686
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4dbfc708-e582-4e7e-997f-b8d5843ee28b
Unit42 CookieMiner Jan 2019ATTACK:enterprise:S0492 → uses → ATTACK:enterprise:T1083
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5ea439b8-ca9d-462b-9bb5-e0f13651b10c
Unit42 CookieMiner Jan 2019ATTACK:enterprise:S0492 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7f249ef4-8a3c-4ab5-998f-256ac8ecf588
Unit42 CookieMiner Jan 2019ATTACK:enterprise:S0492 → uses → ATTACK:enterprise:T1140
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8bed4012-0b27-409b-8236-1b5238dd477d
Unit42 CookieMiner Jan 2019ATTACK:enterprise:S0492 → uses → ATTACK:enterprise:T1005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--aff9bcd9-34b9-4c94-9ce0-dd4852118f91
Unit42 CookieMiner Jan 2019ATTACK:enterprise:S0492 → uses → ATTACK:enterprise:T1518.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--bd17ac4f-746a-4299-b9cc-ff587c57e4f2
Unit42 CookieMiner Jan 2019ATTACK:enterprise:S0492 → uses → ATTACK:enterprise:T1027.010
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d3142001-8501-474a-a0cd-2e12bba52148
Unit42 CookieMiner Jan 2019ATTACK:enterprise:S0492 → uses → ATTACK:enterprise:T1059.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--dcbe360b-c7d3-45bd-a1ef-a13bc2a562fe
Unit42 CookieMiner Jan 2019ATTACK:enterprise:S0492 → uses → ATTACK:enterprise:T1543.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e1f316bc-b215-4a72-9108-7c5bd69f0454
Unit42 CookieMiner Jan 2019ATTACK:enterprise:S0492 → uses → ATTACK:enterprise:T1059.006
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e2a29101-0b7e-4dab-adec-602712c09893
Unit42 CookieMiner Jan 2019