BLINDINGCAN
Software · ATTACK:enterprise:S0520
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S0520",
"title": "BLINDINGCAN",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0520",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--01dbc71d-0ee8-420d-abb4-3dfb6a4bf725",
"external_id": "S0520",
"domain": "enterprise",
"created": "2020-10-27T18:45:58.576Z",
"modified": "2025-10-21T03:13:35.145Z",
"version": "1.2",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "NHS UK BLINDINGCAN Aug 2020",
"url": "https://digital.nhs.uk/cyber-alerts/2020/cc-3603"
},
{
"source_name": "US-CERT BLINDINGCAN Aug 2020",
"url": "https://us-cert.cisa.gov/ncas/analysis-reports/ar20-232a"
}
]
}Explicit source assertions (23)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S0520 → uses → ATTACK:enterprise:T1082
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--11ed4654-a7bf-4063-9452-6d6174b9f8bc
US-CERT BLINDINGCAN Aug 2020ATTACK:enterprise:S0520 → uses → ATTACK:enterprise:T1059.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--170fb051-0d3d-4105-b6d2-96c9c68e4b8c
US-CERT BLINDINGCAN Aug 2020ATTACK:enterprise:S0520 → uses → ATTACK:enterprise:T1071.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1909b21c-27c1-480b-a550-374af83c47dd
US-CERT BLINDINGCAN Aug 2020ATTACK:enterprise:S0520 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1c33c9cd-afac-490a-b487-bd97c93a14cc
US-CERT BLINDINGCAN Aug 2020ATTACK:enterprise:S0520 → uses → ATTACK:enterprise:T1005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--36d45d93-4a7f-4af1-b89a-2c2744f6b535
US-CERT BLINDINGCAN Aug 2020ATTACK:enterprise:S0520 → uses → ATTACK:enterprise:T1036.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--44577477-b599-46f0-84bf-7e0de773d848
US-CERT BLINDINGCAN Aug 2020ATTACK:enterprise:S0520 → uses → ATTACK:enterprise:T1132.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--46e84bd8-d38f-43e7-b62b-ea211231abef
US-CERT BLINDINGCAN Aug 2020ATTACK:enterprise:S0520 → uses → ATTACK:enterprise:T1027.013
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--48e36609-a492-43a6-b0ab-c27ce106b0e6
US-CERT BLINDINGCAN Aug 2020ATTACK:enterprise:S0520 → uses → ATTACK:enterprise:T1553.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4a60552c-4abb-4310-be2c-191042ceb637
US-CERT BLINDINGCAN Aug 2020ATTACK:enterprise:S0520 → uses → ATTACK:enterprise:T1070.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--719676a8-9d6c-4ac6-812b-aa268a9abc88
US-CERT BLINDINGCAN Aug 2020ATTACK:enterprise:S0520 → uses → ATTACK:enterprise:T1027.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--75d297b3-bd2e-4815-9c28-649f7f1d4a62
US-CERT BLINDINGCAN Aug 2020ATTACK:enterprise:S0520 → uses → ATTACK:enterprise:T1041
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--84694171-7b5a-457d-ac1f-304bf0d71d4c
NHS UK BLINDINGCAN Aug 2020 · US-CERT BLINDINGCAN Aug 2020ATTACK:enterprise:S0520 → uses → ATTACK:enterprise:T1016
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--856670ef-15ae-4d32-a24d-4aba27297586
US-CERT BLINDINGCAN Aug 2020ATTACK:enterprise:S0520 → uses → ATTACK:enterprise:T1070.006
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--914526ae-3322-440f-b79e-780bb0c84cf5
US-CERT BLINDINGCAN Aug 2020 · NHS UK BLINDINGCAN Aug 2020ATTACK:enterprise:S0520 → uses → ATTACK:enterprise:T1129
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a2c141ff-d733-4d73-96af-618ed26b7547
US-CERT BLINDINGCAN Aug 2020ATTACK:enterprise:S0520 → uses → ATTACK:enterprise:T1204.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a3b44434-d499-4c30-b42d-7bb0f6b4bfc4
US-CERT BLINDINGCAN Aug 2020ATTACK:enterprise:S0520 → uses → ATTACK:enterprise:T1218.011
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c406dfb3-d860-4895-858d-e3092cabd5bb
US-CERT BLINDINGCAN Aug 2020ATTACK:enterprise:S0520 → uses → ATTACK:enterprise:T1680
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c80db47b-f1d6-4f62-aea0-d87edb778f5e
US-CERT BLINDINGCAN Aug 2020ATTACK:enterprise:S0520 → uses → ATTACK:enterprise:T1083
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ca2f6580-fb02-4687-b514-94bad87f7bf8
US-CERT BLINDINGCAN Aug 2020 · NHS UK BLINDINGCAN Aug 2020ATTACK:enterprise:G0032 → uses → ATTACK:enterprise:S0520
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d927e540-e6b8-4ddb-8652-cd510fe285ed
US-CERT BLINDINGCAN Aug 2020ATTACK:enterprise:S0520 → uses → ATTACK:enterprise:T1566.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--db8bb9fc-49b8-49b7-9123-6468176dd1ad
US-CERT BLINDINGCAN Aug 2020ATTACK:enterprise:S0520 → uses → ATTACK:enterprise:T1573.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e2f9132b-cb32-4b39-8d6d-fec48be3e92f
US-CERT BLINDINGCAN Aug 2020ATTACK:enterprise:S0520 → uses → ATTACK:enterprise:T1140
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ea027248-40a2-403b-a0e9-748bdc8c5667
US-CERT BLINDINGCAN Aug 2020