Skip to content

BOLDMOVE

Software · ATTACK:enterprise:S1184

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance

{
  "id": "ATTACK:enterprise:S1184",
  "title": "BOLDMOVE",
  "type": "Software",
  "source_url": "https://attack.mitre.org/software/S1184",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "malware--325fa466-4a2a-45a0-acc6-f6bed9b45ebe",
  "external_id": "S1184",
  "domain": "enterprise",
  "created": "2024-12-31T22:33:05.594Z",
  "modified": "2025-04-15T19:46:33.956Z",
  "version": "1.0",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "Google Cloud BOLDMOVE 2023",
      "url": "https://cloud.google.com/blog/topics/threat-intelligence/chinese-actors-exploit-fortios-flaw/"
    }
  ]
}

Explicit source assertions (14)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:S1184 → uses → ATTACK:enterprise:T1059.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--054ee669-c678-4519-9cf6-1bff8d48d1bf

Google Cloud BOLDMOVE 2023

ATTACK:enterprise:S1184 → uses → ATTACK:enterprise:T1564.011

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--28868afd-06fb-4f9d-a925-b8e035dfde15

Google Cloud BOLDMOVE 2023

ATTACK:enterprise:S1184 → uses → ATTACK:enterprise:T1543

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4b992403-58a0-455c-a028-83743f0885b9

Google Cloud BOLDMOVE 2023

ATTACK:enterprise:S1184 → uses → ATTACK:enterprise:T1083

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--618b5859-2518-424a-8345-6e4826586f9f

Google Cloud BOLDMOVE 2023

ATTACK:enterprise:S1184 → uses → ATTACK:enterprise:T1573.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--88e6ab9b-6804-46be-8080-7e92bd076761

Google Cloud BOLDMOVE 2023

ATTACK:enterprise:S1184 → uses → ATTACK:enterprise:T1554

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8b35ba04-fdad-4265-a1e8-e089a79baf4d

Google Cloud BOLDMOVE 2023

ATTACK:enterprise:S1184 → uses → ATTACK:enterprise:T1016

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9ac73535-1839-40c8-8cb3-cbe974134e60

Google Cloud BOLDMOVE 2023

ATTACK:enterprise:S1184 → uses → ATTACK:enterprise:T1190

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a7fbea9e-99a2-4319-b159-f4cb18908c27

Google Cloud BOLDMOVE 2023

ATTACK:enterprise:S1184 → uses → ATTACK:enterprise:T1070.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--bcda4232-e09c-4bed-a4a6-09e38f8a0056

Google Cloud BOLDMOVE 2023

ATTACK:enterprise:S1184 → uses → ATTACK:enterprise:T1071.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c04b25dd-9f70-4949-9680-b976aa5455cf

Google Cloud BOLDMOVE 2023

ATTACK:enterprise:S1184 → uses → ATTACK:enterprise:T1082

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c4684b0f-86e1-4200-bd12-e9472f892779

Google Cloud BOLDMOVE 2023

ATTACK:enterprise:S1184 → uses → ATTACK:enterprise:T1685

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d1fd41fe-4cac-4bd1-8bca-4193da673ba3

Google Cloud BOLDMOVE 2023

ATTACK:enterprise:S1184 → uses → ATTACK:enterprise:T1480

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e2a0910e-16a9-493e-8c0e-d5557e77e3b0

Google Cloud BOLDMOVE 2023

ATTACK:enterprise:S1184 → uses → ATTACK:enterprise:T1090.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f0fc42ee-9da6-4ec0-a3ff-8248889febe5

Google Cloud BOLDMOVE 2023

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.