Shark
Software · ATTACK:enterprise:S1019
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S1019",
"title": "Shark",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S1019",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--99854cc8-f202-4e03-aa0a-4f8a4af93229",
"external_id": "S1019",
"domain": "enterprise",
"created": "2022-06-10T19:45:53.538Z",
"modified": "2024-04-11T00:08:18.570Z",
"version": "1.1",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "Accenture Lyceum Targets November 2021",
"url": "https://www.accenture.com/us-en/blogs/cyber-defense/iran-based-lyceum-campaigns"
},
{
"source_name": "ClearSky Siamesekitten August 2021",
"url": "https://www.clearskysec.com/siamesekitten/"
}
]
}Explicit source assertions (18)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S1019 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--03d6c33c-22d4-484f-8f16-8d49c307da80
Accenture Lyceum Targets November 2021 · ClearSky Siamesekitten August 2021ATTACK:enterprise:S1019 → uses → ATTACK:enterprise:T1041
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--08482fa2-6db3-4c82-8ca0-9d666454f2c6
ClearSky Siamesekitten August 2021ATTACK:enterprise:S1019 → uses → ATTACK:enterprise:T1027.013
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--10d22e64-01ff-4302-a615-ee23970d86ae
Accenture Lyceum Targets November 2021 · ClearSky Siamesekitten August 2021ATTACK:enterprise:S1019 → uses → ATTACK:enterprise:T1029
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1803860a-88df-4af5-8c82-ebbe237bc370
ClearSky Siamesekitten August 2021ATTACK:enterprise:S1019 → uses → ATTACK:enterprise:T1012
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1d7661c8-82cf-481c-89e4-927eedaffc22
Accenture Lyceum Targets November 2021ATTACK:enterprise:S1019 → uses → ATTACK:enterprise:T1082
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--21f5a441-fe32-430e-935c-0929f4101b6e
Accenture Lyceum Targets November 2021 · ClearSky Siamesekitten August 2021ATTACK:enterprise:S1019 → uses → ATTACK:enterprise:T1059.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--346d9aa5-2d93-4843-a219-e0cb79bf6362
Accenture Lyceum Targets November 2021 · ClearSky Siamesekitten August 2021ATTACK:enterprise:G1001 → uses → ATTACK:enterprise:S1019
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--40563725-bb7f-40a2-b2da-c4cfd7799c13
Accenture Lyceum Targets November 2021 · Kaspersky Lyceum October 2021ATTACK:enterprise:S1019 → uses → ATTACK:enterprise:T1008
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--61952f05-92a3-41e0-93c4-d7486a927ece
ClearSky Siamesekitten August 2021ATTACK:enterprise:S1019 → uses → ATTACK:enterprise:T1005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--71449072-84c5-461c-9bba-2caa81051499
Accenture Lyceum Targets November 2021 · ClearSky Siamesekitten August 2021ATTACK:enterprise:S1019 → uses → ATTACK:enterprise:T1497.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--87e73122-361f-47a2-a401-0e863300e123
ClearSky Siamesekitten August 2021ATTACK:enterprise:S1019 → uses → ATTACK:enterprise:T1036.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9b2a6cfa-3b05-4809-b778-3752bb152c2d
ClearSky Siamesekitten August 2021ATTACK:enterprise:S1019 → uses → ATTACK:enterprise:T1070.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--adb80a62-87cb-4197-a3a7-a3e5a6417d50
ClearSky Siamesekitten August 2021ATTACK:enterprise:S1019 → uses → ATTACK:enterprise:T1140
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b10f18a6-43a8-436f-8d9c-f180428f0a0d
ClearSky Siamesekitten August 2021ATTACK:enterprise:S1019 → uses → ATTACK:enterprise:T1071.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c1fc2403-6cea-40ca-a5ba-82296600988c
Accenture Lyceum Targets November 2021 · ClearSky Siamesekitten August 2021ATTACK:enterprise:S1019 → uses → ATTACK:enterprise:T1071.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e9113d90-4c55-465a-88c6-b58c40b46f96
Accenture Lyceum Targets November 2021 · ClearSky Siamesekitten August 2021ATTACK:enterprise:S1019 → uses → ATTACK:enterprise:T1074
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f3b14839-81b5-436f-87b0-f5b8bd10c07c
ClearSky Siamesekitten August 2021ATTACK:enterprise:S1019 → uses → ATTACK:enterprise:T1568.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--fbe56c62-5123-4783-8e66-7457c8cf66a2
Accenture Lyceum Targets November 2021 · ClearSky Siamesekitten August 2021