ROADSWEEP
Software · ATTACK:enterprise:S1150
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S1150",
"title": "ROADSWEEP",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S1150",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--be471c69-12d5-4bcc-9dad-3d42c3dbca4b",
"external_id": "S1150",
"domain": "enterprise",
"created": "2024-08-08T17:32:30.731Z",
"modified": "2024-08-09T17:27:24.399Z",
"version": "1.0",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "Mandiant ROADSWEEP August 2022",
"url": "https://cloud.google.com/blog/topics/threat-intelligence/likely-iranian-threat-actor-conducts-politically-motivated-disruptive-activity-against/"
}
]
}Explicit source assertions (16)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S1150 → uses → ATTACK:enterprise:T1070.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--01dc7e85-da23-4a0b-937e-a7a6e83c7f53
Mandiant ROADSWEEP August 2022 · Microsoft Albanian Government Attacks September 2022ATTACK:enterprise:S1150 → uses → ATTACK:enterprise:T1027.013
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--12f96649-9314-4d5f-854b-6316737df1ed
CISA Iran Albanian Attacks September 2022 · Mandiant ROADSWEEP August 2022 · Microsoft Albanian Government Attacks September 2022ATTACK:enterprise:S1150 → uses → ATTACK:enterprise:T1553.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4dcca852-a483-4cd2-9fc5-3fa227a12f74
CISA Iran Albanian Attacks September 2022ATTACK:enterprise:S1150 → uses → ATTACK:enterprise:T1559
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--54607e53-5952-47f1-bffa-72379bbf58c8
Mandiant ROADSWEEP August 2022ATTACK:enterprise:S1150 → uses → ATTACK:enterprise:T1486
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5f408271-9f8a-4eab-ac54-a8c81be61724
CISA Iran Albanian Attacks September 2022 · Mandiant ROADSWEEP August 2022 · Microsoft Albanian Government Attacks September 2022ATTACK:enterprise:S1150 → uses → ATTACK:enterprise:T1491.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6c2f9c04-540f-4ea9-be8a-95ca1d6866cd
Microsoft Albanian Government Attacks September 2022ATTACK:enterprise:S1150 → uses → ATTACK:enterprise:T1140
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--708ac02f-8419-43bd-a6d6-682e28faa507
CISA Iran Albanian Attacks September 2022 · Mandiant ROADSWEEP August 2022ATTACK:enterprise:S1150 → uses → ATTACK:enterprise:T1547.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--961ad537-4280-420a-8c1d-0bc32147949a
Microsoft Albanian Government Attacks September 2022ATTACK:enterprise:S1150 → uses → ATTACK:enterprise:T1680
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a2fbefb3-bbb7-4c98-8ef1-8440f4ee3bd6
Mandiant ROADSWEEP August 2022 · Microsoft Albanian Government Attacks September 2022ATTACK:enterprise:S1150 → uses → ATTACK:enterprise:T1120
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--bb60e296-c3d9-4363-992d-90f61607553a
Mandiant ROADSWEEP August 2022ATTACK:enterprise:S1150 → uses → ATTACK:enterprise:T1489
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--bdc99461-1e2b-4fba-bf39-a5e17f7d3384
Mandiant ROADSWEEP August 2022ATTACK:enterprise:S1150 → uses → ATTACK:enterprise:T1480
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c29450bf-20a4-47f8-8ef9-7c6559cfad75
CISA Iran Albanian Attacks September 2022 · Mandiant ROADSWEEP August 2022 · Microsoft Albanian Government Attacks September 2022ATTACK:enterprise:S1150 → uses → ATTACK:enterprise:T1083
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d3d69fb7-c6f3-43d7-bb38-ac26fe22b5be
CISA Iran Albanian Attacks September 2022 · Mandiant ROADSWEEP August 2022 · Microsoft Albanian Government Attacks September 2022ATTACK:enterprise:C0038 → uses → ATTACK:enterprise:S1150
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ef54b620-1e4b-41cf-afbd-9486292170e7
Mandiant ROADSWEEP August 2022ATTACK:enterprise:S1150 → uses → ATTACK:enterprise:T1490
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f5d844e2-b442-4422-9880-e648ee387d67
CISA Iran Albanian Attacks September 2022 · Mandiant ROADSWEEP August 2022ATTACK:enterprise:S1150 → uses → ATTACK:enterprise:T1059.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--fa2bb401-2ab0-4971-948b-7faf58394399
Mandiant ROADSWEEP August 2022 · Microsoft Albanian Government Attacks September 2022