aol.pm

SpicyOmelette

Software · ATTACK:enterprise:S0646

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:enterprise:S0646",
  "title": "SpicyOmelette",
  "type": "Software",
  "source_url": "https://attack.mitre.org/software/S0646",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "malware--599cd7b5-37b5-4cdd-8174-2811531ce9d0",
  "external_id": "S0646",
  "domain": "enterprise",
  "created": "2021-09-21T14:55:00.996Z",
  "modified": "2025-04-25T14:43:27.242Z",
  "version": "1.0",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "Secureworks GOLD KINGSWOOD September 2018",
      "url": "https://www.secureworks.com/blog/cybercriminals-increasingly-trying-to-ensnare-the-big-financial-fish"
    }
  ]
}

Explicit source assertions (12)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:S0646 → uses → ATTACK:enterprise:T1082

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--44272fb3-a31d-4cea-b11c-b65e2bdcbd68

Secureworks GOLD KINGSWOOD September 2018

ATTACK:enterprise:S0646 → uses → ATTACK:enterprise:T1518

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4859e904-e404-4bae-a106-d347c9cc2e18

Secureworks GOLD KINGSWOOD September 2018

ATTACK:enterprise:S0646 → uses → ATTACK:enterprise:T1566.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--50860aec-3490-4783-8ffb-ad4217cf0d58

Secureworks GOLD KINGSWOOD September 2018

ATTACK:enterprise:S0646 → uses → ATTACK:enterprise:T1005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--60855df0-b2f5-46ed-ba9d-09bdfd7d1ac6

Secureworks GOLD KINGSWOOD September 2018

ATTACK:enterprise:S0646 → uses → ATTACK:enterprise:T1105

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7f7f05aa-a246-48ce-89d2-48035cac5ffa

Secureworks GOLD KINGSWOOD September 2018

ATTACK:enterprise:S0646 → uses → ATTACK:enterprise:T1016

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--81d74373-fcaa-4089-9715-1550f012739d

Secureworks GOLD KINGSWOOD September 2018

ATTACK:enterprise:G0080 → uses → ATTACK:enterprise:S0646

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a9062522-1891-4405-b8e6-f6465834c18a

Secureworks GOLD KINGSWOOD September 2018

ATTACK:enterprise:S0646 → uses → ATTACK:enterprise:T1059.007

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ab55f99b-5239-4aea-93f7-e1002520bf05

Secureworks GOLD KINGSWOOD September 2018

ATTACK:enterprise:S0646 → uses → ATTACK:enterprise:T1204.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b5372961-d931-497e-8043-1bfa446f65d6

Secureworks GOLD KINGSWOOD September 2018

ATTACK:enterprise:S0646 → uses → ATTACK:enterprise:T1018

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b6609907-ec91-4339-a1ed-811bfe6ca48e

Secureworks GOLD KINGSWOOD September 2018

ATTACK:enterprise:S0646 → uses → ATTACK:enterprise:T1553.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e162ad03-8170-4353-906e-0a294695f880

Secureworks GOLD KINGSWOOD September 2018

ATTACK:enterprise:S0646 → uses → ATTACK:enterprise:T1518.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e9449844-2092-4f7d-9d8f-1ba50060e171

Secureworks GOLD KINGSWOOD September 2018

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.