NightClub
Software · ATTACK:enterprise:S1090
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S1090",
"title": "NightClub",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S1090",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--91c57ed3-7c32-4c68-b388-7db00cb8dac6",
"external_id": "S1090",
"domain": "enterprise",
"created": "2023-09-27T19:32:52.140Z",
"modified": "2023-09-27T19:33:24.323Z",
"version": "1.0",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "MoustachedBouncer ESET August 2023",
"url": "https://www.welivesecurity.com/en/eset-research/moustachedbouncer-espionage-against-foreign-diplomats-in-belarus/"
}
]
}Explicit source assertions (22)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S1090 → uses → ATTACK:enterprise:T1543.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--01b95067-ba65-48c2-8d2c-342e13007cc8
MoustachedBouncer ESET August 2023ATTACK:enterprise:S1090 → uses → ATTACK:enterprise:T1041
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1fec545d-436a-4b70-8ab8-87d217956b8f
MoustachedBouncer ESET August 2023ATTACK:enterprise:S1090 → uses → ATTACK:enterprise:T1036.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2443296f-a8fc-431d-9865-d68dd6142b37
MoustachedBouncer ESET August 2023ATTACK:enterprise:S1090 → uses → ATTACK:enterprise:T1005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--29c989db-83f5-4c1a-944b-a0d78d652de2
MoustachedBouncer ESET August 2023ATTACK:enterprise:S1090 → uses → ATTACK:enterprise:T1106
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2b3cf66b-29d9-4251-b170-977def2692ad
MoustachedBouncer ESET August 2023ATTACK:enterprise:S1090 → uses → ATTACK:enterprise:T1083
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3ad23432-af84-4887-bbf2-733d12d03395
MoustachedBouncer ESET August 2023ATTACK:enterprise:S1090 → uses → ATTACK:enterprise:T1071.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--50c1c2f4-be50-49dc-bac6-dce8e80436ae
MoustachedBouncer ESET August 2023ATTACK:enterprise:G1019 → uses → ATTACK:enterprise:S1090
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--513d7a58-a595-4717-8377-ed144d0e2223
MoustachedBouncer ESET August 2023ATTACK:enterprise:S1090 → uses → ATTACK:enterprise:T1070.006
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--51eb8d9b-1ca4-4a9e-9df4-9415e54e8aff
MoustachedBouncer ESET August 2023ATTACK:enterprise:S1090 → uses → ATTACK:enterprise:T1132.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5da3452c-3f93-42f0-98fd-54fa7bc0c562
MoustachedBouncer ESET August 2023ATTACK:enterprise:S1090 → uses → ATTACK:enterprise:T1071.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--887ca054-848e-4a94-b299-2b625cb739df
MoustachedBouncer ESET August 2023ATTACK:enterprise:S1090 → uses → ATTACK:enterprise:T1036.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8e0dd075-33a5-464a-822e-f0878982ebf8
MoustachedBouncer ESET August 2023ATTACK:enterprise:S1090 → uses → ATTACK:enterprise:T1010
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--911beb36-2a36-4c26-9e0d-bea35f6497b6
MoustachedBouncer ESET August 2023ATTACK:enterprise:S1090 → uses → ATTACK:enterprise:T1056.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9631e908-4538-4d61-943f-2b682e72b903
MoustachedBouncer ESET August 2023ATTACK:enterprise:S1090 → uses → ATTACK:enterprise:T1113
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9ae45b84-016d-4617-a4fd-3a309dc94b57
MoustachedBouncer ESET August 2023ATTACK:enterprise:S1090 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a881d020-95c1-4123-98d0-c31cb8d2ff4e
MoustachedBouncer ESET August 2023ATTACK:enterprise:S1090 → uses → ATTACK:enterprise:T1027
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c1dddcf3-c3b1-498a-9a80-8dcbf6887d10
MoustachedBouncer ESET August 2023ATTACK:enterprise:S1090 → uses → ATTACK:enterprise:T1057
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c434aa66-8fd2-47f0-8ec4-88a866d99e88
MoustachedBouncer ESET August 2023ATTACK:enterprise:S1090 → uses → ATTACK:enterprise:T1120
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c596d308-22af-45db-9c72-2ce1b3695f90
MoustachedBouncer ESET August 2023ATTACK:enterprise:S1090 → uses → ATTACK:enterprise:T1123
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d12ef54e-bf2b-4c78-acb9-69a41287f6e0
MoustachedBouncer ESET August 2023ATTACK:enterprise:S1090 → uses → ATTACK:enterprise:T1074.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d8c447e8-6581-47ca-98d6-44b262023669
MoustachedBouncer ESET August 2023ATTACK:enterprise:S1090 → uses → ATTACK:enterprise:T1112
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--dd0dbfef-065c-47c9-a9e3-ac8d02f7ca42
MoustachedBouncer ESET August 2023