Mispadu
Software · ATTACK:enterprise:S1122
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S1122",
"title": "Mispadu",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S1122",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--4e6464d2-69df-4e56-8d4c-1973f84d7b80",
"external_id": "S1122",
"domain": "enterprise",
"created": "2024-03-13T20:59:22.655Z",
"modified": "2024-04-18T14:15:33.229Z",
"version": "1.0",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "ESET Security Mispadu Facebook Ads 2019",
"url": "https://www.welivesecurity.com/2019/11/19/mispadu-advertisement-discounted-unhappy-meal/"
},
{
"source_name": "Segurança Informática URSA Sophisticated Loader 2020",
"url": "https://seguranca-informatica.pt/threat-analysis-the-emergent-ursa-trojan-impacts-many-countries-using-a-sophisticated-loader/"
},
{
"source_name": "SCILabs Malteiro 2021",
"url": "https://blog.scilabs.mx/en/cyber-threat-profile-malteiro/"
},
{
"source_name": "SCILabs URSA/Mispadu Evolution 2023",
"url": "https://blog.scilabs.mx/en/evolution-of-banking-trojan-ursa-mispadu/"
}
]
}Explicit source assertions (27)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S1122 → uses → ATTACK:enterprise:T1140
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0da38f11-0e39-4505-aa05-61464113ba8f
ESET Security Mispadu Facebook Ads 2019 · SCILabs Malteiro 2021ATTACK:enterprise:S1122 → uses → ATTACK:enterprise:T1555.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--10432a2f-2a96-46ad-b9c1-c35f405c09db
ESET Security Mispadu Facebook Ads 2019 · Metabase Q Mispadu Trojan 2023 · SCILabs Malteiro 2021ATTACK:enterprise:S1122 → uses → ATTACK:enterprise:T1113
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2723c701-96d8-44e9-96ce-34c57e50a68e
ESET Security Mispadu Facebook Ads 2019 · Metabase Q Mispadu Trojan 2023 · SCILabs Malteiro 2021 · SCILabs URSA/Mispadu Evolution 2023ATTACK:enterprise:S1122 → uses → ATTACK:enterprise:T1218.007
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2840f96e-2bf5-412c-8aba-11ee0838b3bc
ESET Security Mispadu Facebook Ads 2019 · SCILabs Malteiro 2021ATTACK:enterprise:S1122 → uses → ATTACK:enterprise:T1614.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--29639eea-ddaf-44ce-95d3-053ba8a9eeb9
Segurança Informática URSA Sophisticated Loader 2020 · SCILabs Malteiro 2021ATTACK:enterprise:S1122 → uses → ATTACK:enterprise:T1176.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--36fe0753-6883-456e-9bb0-4c46995ec36b
ESET Security Mispadu Facebook Ads 2019ATTACK:enterprise:S1122 → uses → ATTACK:enterprise:T1217
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--42781435-078d-4aad-add9-d70fb5f13bfe
Segurança Informática URSA Sophisticated Loader 2020 · SCILabs Malteiro 2021ATTACK:enterprise:S1122 → uses → ATTACK:enterprise:T1566.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4bf2c4b0-9b7c-4546-ad21-1ca6c97afd14
SCILabs Malteiro 2021ATTACK:enterprise:S1122 → uses → ATTACK:enterprise:T1082
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4d39c319-bf5d-4129-83ba-11df82fdca17
ESET Security Mispadu Facebook Ads 2019ATTACK:enterprise:S1122 → uses → ATTACK:enterprise:T1204.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4f5d4ab0-6514-4a99-a5b9-456c903e4717
ESET Security Mispadu Facebook Ads 2019 · Metabase Q Mispadu Trojan 2023 · SCILabs Malteiro 2021ATTACK:enterprise:G1026 → uses → ATTACK:enterprise:S1122
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5576c61b-2564-407d-9c25-7d155fc8e7b8
SCILabs Malteiro 2021ATTACK:enterprise:S1122 → uses → ATTACK:enterprise:T1106
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--56aab689-f68d-4a38-a814-d9a54d04093d
Segurança Informática URSA Sophisticated Loader 2020 · SCILabs Malteiro 2021ATTACK:enterprise:S1122 → uses → ATTACK:enterprise:T1218.011
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5859ee5b-c54b-4f2b-a6c7-6551046eb929
ESET Security Mispadu Facebook Ads 2019ATTACK:enterprise:S1122 → uses → ATTACK:enterprise:T1056.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--668b180d-a227-4585-98ee-55dddd6eea92
ESET Security Mispadu Facebook Ads 2019 · Metabase Q Mispadu Trojan 2023 · SCILabs URSA/Mispadu Evolution 2023ATTACK:enterprise:S1122 → uses → ATTACK:enterprise:T1547.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6c9c0332-bdd8-4692-af01-cc7ebc486a41
ESET Security Mispadu Facebook Ads 2019 · Metabase Q Mispadu Trojan 2023ATTACK:enterprise:S1122 → uses → ATTACK:enterprise:T1027.013
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6fbd8e04-ce24-4969-9f3e-2df874eceb04
ESET Security Mispadu Facebook Ads 2019 · SCILabs Malteiro 2021 · SCILabs Malteiro Threat Overlap 2023ATTACK:enterprise:S1122 → uses → ATTACK:enterprise:T1055
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--722ffa83-29e2-48bb-a7c1-1cb52fb4aa18
Segurança Informática URSA Sophisticated Loader 2020 · SCILabs Malteiro 2021ATTACK:enterprise:S1122 → uses → ATTACK:enterprise:T1518.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a33a2769-246f-44f4-b40d-441aad3c8c3a
ESET Security Mispadu Facebook Ads 2019 · Metabase Q Mispadu Trojan 2023ATTACK:enterprise:S1122 → uses → ATTACK:enterprise:T1056.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--aa6411df-8f39-4368-9b35-45cc2a7394d8
Segurança Informática URSA Sophisticated Loader 2020 · SCILabs Malteiro 2021ATTACK:enterprise:S1122 → uses → ATTACK:enterprise:T1057
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--af340193-ba4f-47bf-a610-54235946ee1c
ESET Security Mispadu Facebook Ads 2019ATTACK:enterprise:S1122 → uses → ATTACK:enterprise:T1497.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b53c54de-bbd9-4862-92e1-86b60091cb15
ESET Security Mispadu Facebook Ads 2019 · SCILabs Malteiro 2021ATTACK:enterprise:S1122 → uses → ATTACK:enterprise:T1083
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b57b7604-1b4c-4ee2-aa1a-737f459df99f
ESET Security Mispadu Facebook Ads 2019ATTACK:enterprise:S1122 → uses → ATTACK:enterprise:T1041
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c349ffd1-a380-4855-af78-8d8d180cc6b9
ESET Security Mispadu Facebook Ads 2019 · SCILabs Malteiro 2021ATTACK:enterprise:S1122 → uses → ATTACK:enterprise:T1573.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d735ffe8-2868-432a-8865-7b3bc64d3d0c
Segurança Informática URSA Sophisticated Loader 2020ATTACK:enterprise:S1122 → uses → ATTACK:enterprise:T1115
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d9ce0226-58f6-4907-a20f-6c821b537f7f
ESET Security Mispadu Facebook Ads 2019ATTACK:enterprise:S1122 → uses → ATTACK:enterprise:T1555
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e9cbcdd4-645d-45ee-a5b6-65c651afe154
ESET Security Mispadu Facebook Ads 2019 · Segurança Informática URSA Sophisticated Loader 2020 · SCILabs Malteiro 2021ATTACK:enterprise:S1122 → uses → ATTACK:enterprise:T1059.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f5726b93-09c6-4130-8e87-5916338b438e
ESET Security Mispadu Facebook Ads 2019 · SCILabs Malteiro 2021