PS1
Software · ATTACK:enterprise:S0613
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S0613",
"title": "PS1",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0613",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--13183cdf-280b-46be-913a-5c6df47831e7",
"external_id": "S0613",
"domain": "enterprise",
"created": "2021-05-24T14:55:59.316Z",
"modified": "2024-04-11T00:25:13.397Z",
"version": "1.2",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "BlackBerry CostaRicto November 2020",
"url": "https://blogs.blackberry.com/en/2020/11/the-costaricto-campaign-cyber-espionage-outsourced"
}
]
}Explicit source assertions (6)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S0613 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--107f8870-4adf-4f63-acf2-d28677905235
BlackBerry CostaRicto November 2020ATTACK:enterprise:S0613 → uses → ATTACK:enterprise:T1055.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1e075dae-a0df-4ab9-a297-fda2248bc254
BlackBerry CostaRicto November 2020ATTACK:enterprise:S0613 → uses → ATTACK:enterprise:T1059.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5cb2c8db-bd76-4a39-be55-6de6864cb129
BlackBerry CostaRicto November 2020ATTACK:enterprise:S0613 → uses → ATTACK:enterprise:T1027.013
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--798a3e14-1c98-4bac-af2d-137367f78912
BlackBerry CostaRicto November 2020ATTACK:enterprise:S0613 → uses → ATTACK:enterprise:T1140
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--bf9adcbf-3d35-4d70-b681-e7180f3c08da
BlackBerry CostaRicto November 2020ATTACK:enterprise:C0004 → uses → ATTACK:enterprise:S0613
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c6c88847-a34c-4e02-a3ab-93daa68744fd
BlackBerry CostaRicto November 2020