aol.pm

Latrodectus

Software · ATTACK:enterprise:S1160

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:enterprise:S1160",
  "title": "Latrodectus",
  "type": "Software",
  "source_url": "https://attack.mitre.org/software/S1160",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "malware--76fde8df-3495-47c9-82eb-125c4f7fb621",
  "external_id": "S1160",
  "domain": "enterprise",
  "created": "2024-09-16T18:47:30.547Z",
  "modified": "2024-09-30T17:59:30.330Z",
  "version": "1.0",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "IceNova"
    },
    {
      "source_name": "Unidentified 111"
    },
    {
      "source_name": "Bleeping Computer Latrodectus April 2024",
      "url": "https://www.bleepingcomputer.com/news/security/new-latrodectus-malware-attacks-use-microsoft-cloudflare-themes/"
    },
    {
      "source_name": "Bitsight Latrodectus June 2024",
      "url": "https://www.bitsight.com/blog/latrodectus-are-you-coming-back"
    },
    {
      "source_name": "Latrodectus APR 2024",
      "url": "https://www.proofpoint.com/us/blog/threat-insight/latrodectus-spider-bytes-ice"
    }
  ]
}

Explicit source assertions (45)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1102

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0435981c-4e1c-483f-8eb0-6586179e9c23

Palo Alto Latrodectus Activity June 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1218.011

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0f2bab58-fd7c-486a-b2b7-48eeb39bf212

Bleeping Computer Latrodectus April 2024 · Elastic Latrodectus May 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1132.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--14bcff67-6ecb-4a0a-9fcf-5b5ea72a6f06

Latrodectus APR 2024 · Elastic Latrodectus May 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1059.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1b5bac20-4c29-42a5-86ce-622c1d50cf6b

Bitsight Latrodectus June 2024 · Elastic Latrodectus May 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1016

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1cc9d9cb-1671-44a3-916c-bf191490946c

Bitsight Latrodectus June 2024 · Elastic Latrodectus May 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1218.007

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1dd52d2b-6245-4620-aabf-161ed260965a

Bleeping Computer Latrodectus April 2024 · Latrodectus APR 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1135

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--20d2449b-aa52-40bc-8a7a-5c6f72eb3ce0

Bitsight Latrodectus June 2024 · Elastic Latrodectus May 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1057

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--22926f48-80d0-4ce1-8ee0-41a8930b34ef

Bitsight Latrodectus June 2024 · Latrodectus APR 2024 · Elastic Latrodectus May 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1033

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2fd0ebb0-6086-441d-b83c-e73e3f8ed69a

Elastic Latrodectus May 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1053.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--35437cd0-280a-407d-9f3a-36dc61deba1a

Bitsight Latrodectus June 2024 · Latrodectus APR 2024 · Elastic Latrodectus May 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1204.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--3ff580a6-1323-4587-8f64-137e02f148e6

Bleeping Computer Latrodectus April 2024 · Latrodectus APR 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1027.007

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--44d369b8-7e27-4197-8ba7-6153f3abbf35

Latrodectus APR 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--46536757-5c5b-4927-9f68-b12ebef13568

Bitsight Latrodectus June 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1566.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--550096e6-6ed2-41de-8cfc-3a59da54bf68

Bleeping Computer Latrodectus April 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1140

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5a56f203-5537-4dd1-a08d-db4526bf75bd

Bitsight Latrodectus June 2024 · Latrodectus APR 2024 · Elastic Latrodectus May 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1070.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5bd21716-220c-4135-b7f5-3f6fb2c11ccb

Bitsight Latrodectus June 2024 · Elastic Latrodectus May 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1083

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5c15936e-ed4a-4a6e-a126-eb36084019b5

Bitsight Latrodectus June 2024 · Latrodectus APR 2024 · Elastic Latrodectus May 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1559.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5cdc3bec-bc58-4e23-97a1-cde538035a35

Bitsight Latrodectus June 2024 · Elastic Latrodectus May 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1027.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--6801470e-9db4-4900-9bf0-aaef2774cdd3

Elastic Latrodectus May 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1059.007

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--6d5e93c2-073a-4974-a25f-c5a805780a45

Bitsight Latrodectus June 2024 · Elastic Latrodectus May 2024 · Palo Alto Latrodectus Activity June 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1105

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--70d06758-46ce-47b9-a3af-ff341d210a4a

Bitsight Latrodectus June 2024 · Latrodectus APR 2024 · Elastic Latrodectus May 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1071.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--78cd9016-aab5-4356-ae15-b3d38b7491fb

Bitsight Latrodectus June 2024 · Latrodectus APR 2024 · Elastic Latrodectus May 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1041

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--84afb7d8-4b2f-4995-a14c-a24b45d314fc

Bitsight Latrodectus June 2024 · Latrodectus APR 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1036.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8ac5b693-ed9b-483e-9f7c-7cd1357e3499

Elastic Latrodectus May 2024

ATTACK:enterprise:G1037 → uses → ATTACK:enterprise:S1160

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8c56c995-3538-46bc-a05e-b0cffda55198

Latrodectus APR 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1106

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--948eb193-9037-43cf-99db-5d7912277ed0

Bitsight Latrodectus June 2024 · Elastic Latrodectus May 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1204.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9beeef27-988c-4ec3-ab34-d452d4dd6a76

Bleeping Computer Latrodectus April 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1104

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a05c9888-4d88-4487-8e48-b0509de3fb50

Latrodectus APR 2024

ATTACK:enterprise:G1038 → uses → ATTACK:enterprise:S1160

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a3f0a84b-e32a-46d3-8ada-189f2d8796c8

Bitsight Latrodectus June 2024 · Latrodectus APR 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1482

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a7d74cbe-ff0d-428c-8869-148f6bab807b

Bitsight Latrodectus June 2024 · Elastic Latrodectus May 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1027.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a89ce82a-b4f6-4055-bed3-16c2eeb984a5

Elastic Latrodectus May 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1529

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--aba4a71f-ddee-428b-a454-9842fd8750fd

Elastic Latrodectus May 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1082

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ac4b5156-e98e-4826-abc5-02e244496c03

Bitsight Latrodectus June 2024 · Latrodectus APR 2024 · Elastic Latrodectus May 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1518.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ae8ac860-1dfc-41c3-81ab-08da9619c4a3

Bitsight Latrodectus June 2024 · Elastic Latrodectus May 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1573.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--be2d7f8b-8e7d-45ac-b855-385bc1e03b7e

Bitsight Latrodectus June 2024 · Latrodectus APR 2024 · Elastic Latrodectus May 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1564.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c18285a0-8c55-4aee-bb60-55b359cdfacb

Elastic Latrodectus May 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1069.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c915bb8a-631a-47b9-9b97-c43939b17661

Bitsight Latrodectus June 2024 · Elastic Latrodectus May 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1027.013

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d2aa6fd1-d530-4fbf-ada7-8b3ddb149d7e

Bitsight Latrodectus June 2024 · Latrodectus APR 2024 · Elastic Latrodectus May 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1547.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d7f1b78b-824d-4ddc-a4cc-3fd44d07c4d3

Latrodectus APR 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1497.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d80dc743-4799-4497-8708-b1324b38e3e1

Bitsight Latrodectus June 2024 · Latrodectus APR 2024 · Elastic Latrodectus May 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1566.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d9a681a0-bf13-40b2-9534-f244d48d3a92

Bleeping Computer Latrodectus April 2024 · Latrodectus APR 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1047

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e7995f43-d3f1-4ad2-b3bd-fc835faa3333

Bitsight Latrodectus June 2024 · Elastic Latrodectus May 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1622

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ebb04a61-225d-4cd3-b589-b3001069566e

Latrodectus APR 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1087.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f451a96a-9266-4252-bd1f-d61c12691708

Elastic Latrodectus May 2024

ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1021.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--fb699407-1269-407a-845d-7085a7ae836d

Palo Alto Latrodectus Activity June 2024

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.