aol.pm

J-magic

Software · ATTACK:enterprise:S1203

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:enterprise:S1203",
  "title": "J-magic",
  "type": "Software",
  "source_url": "https://attack.mitre.org/software/S1203",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "malware--2ade64da-5114-42e4-9d56-335379cca561",
  "external_id": "S1203",
  "domain": "enterprise",
  "created": "2025-02-18T17:59:32.603Z",
  "modified": "2025-04-15T19:46:33.873Z",
  "version": "1.0",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "Lumen J-Magic JAN 2025",
      "url": "https://blog.lumen.com/the-j-magic-show-magic-packets-and-where-to-find-them/"
    }
  ]
}

Explicit source assertions (9)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:S1203 → uses → ATTACK:enterprise:T1036.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1e15679d-de1c-47a8-a993-8d70fbffd6e4

Lumen J-Magic JAN 2025

ATTACK:enterprise:C0050 → uses → ATTACK:enterprise:S1203

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--201681ba-f8f2-470a-8b43-09733833d3fc

Lumen J-Magic JAN 2025

ATTACK:enterprise:S1203 → uses → ATTACK:enterprise:T1070.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2200e547-9af6-4681-b8d3-b1cc3f2ef178

Lumen J-Magic JAN 2025

ATTACK:enterprise:S1203 → uses → ATTACK:enterprise:T1095

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--24a917f3-08c0-4ba1-955d-7e9c65dc26f7

Lumen J-Magic JAN 2025

ATTACK:enterprise:S1203 → uses → ATTACK:enterprise:T1016

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--475d258d-4ebb-41c5-861c-904c75036cf3

Lumen J-Magic JAN 2025

ATTACK:enterprise:S1203 → uses → ATTACK:enterprise:T1573.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--58470078-7abc-4c09-b304-e49cc515d412

Lumen J-Magic JAN 2025

ATTACK:enterprise:S1203 → uses → ATTACK:enterprise:T1205

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b3bd6363-e6dc-4c4a-ac41-2091127e1860

Lumen J-Magic JAN 2025

ATTACK:enterprise:S1203 → uses → ATTACK:enterprise:T1040

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d5cd9334-11f1-42c8-b332-8a0aa884e254

Lumen J-Magic JAN 2025

ATTACK:enterprise:S1203 → uses → ATTACK:enterprise:T1059.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--eb1f427d-62ae-4f5d-8561-c7bcfa91d850

Lumen J-Magic JAN 2025

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.