Fooder
Software · ATTACK:enterprise:S9033
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S9033",
"title": "Fooder",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S9033",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--7c8865dc-1bf9-49ce-b5f2-f15abde0909a",
"external_id": "S9033",
"domain": "enterprise",
"created": "2026-04-20T21:28:28.895Z",
"modified": "2026-04-23T03:31:09.302Z",
"version": "1.0",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "ESET_MuddyWater_Dec2025",
"url": "https://www.welivesecurity.com/en/eset-research/muddywater-snakes-riverbank/"
}
]
}Explicit source assertions (8)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S9033 → uses → ATTACK:enterprise:T1027
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1bf7899f-98c1-4600-a15a-4e77880c21ee
ESET_MuddyWater_Dec2025ATTACK:enterprise:S9033 → uses → ATTACK:enterprise:T1134.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2c37e56a-4657-41e4-8b94-abe5c3a22674
ESET_MuddyWater_Dec2025ATTACK:enterprise:S9033 → uses → ATTACK:enterprise:T1106
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6d20f944-c10f-4386-ae3d-fdb349cbd99b
ESET_MuddyWater_Dec2025ATTACK:enterprise:S9033 → uses → ATTACK:enterprise:T1620
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7550da21-7a51-4c8c-91d3-aacb7c2db10e
ESET_MuddyWater_Dec2025ATTACK:enterprise:G0069 → uses → ATTACK:enterprise:S9033
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--90239ac2-1c89-4f78-8b52-f6f51766ac30
ESET_MuddyWater_Dec2025ATTACK:enterprise:S9033 → uses → ATTACK:enterprise:T1036.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--94d68862-0b6a-4a32-ab9c-61c0ddb457c9
ESET_MuddyWater_Dec2025ATTACK:enterprise:S9033 → uses → ATTACK:enterprise:T1678
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cbb83538-3a5b-4dcc-a2df-b960dde3d36e
ESET_MuddyWater_Dec2025ATTACK:enterprise:S9033 → uses → ATTACK:enterprise:T1140
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e7c9e0f2-d1be-440b-9b6b-7273661d8dac
ESET_MuddyWater_Dec2025