FrostyGoop
Software · ATTACK:ics:S1165
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:ics:S1165",
"title": "FrostyGoop",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S1165",
"snapshot": "ics-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--b34df04a-9d30-4d84-a03f-0d536ee19a05",
"external_id": "S1165",
"domain": "ics",
"created": "2024-11-20T23:02:16.588Z",
"modified": "2024-11-20T23:33:20.890Z",
"version": "1.0",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "BUSTLEBERM"
},
{
"source_name": "Dragos FROSTYGOOP 2024",
"url": "https://hub.dragos.com/hubfs/Reports/Dragos-FrostyGoop-ICS-Malware-Intel-Brief-0724_r2.pdf"
},
{
"source_name": "Nozomi BUSTLEBERM 2024",
"url": "https://www.nozominetworks.com/blog/protecting-against-frostygoop-bustleberm-malware"
}
]
}Explicit source assertions (6)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:ics:S1165 → uses → ATTACK:ics:T0836
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0d563cbc-b22c-4748-b082-db98bb7f0dab
Dragos FROSTYGOOP 2024 · Nozomi BUSTLEBERM 2024ATTACK:ics:C0041 → uses → ATTACK:ics:S1165
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--12e84466-fb05-4d55-9220-5933ee0fcb43
Dragos FROSTYGOOP 2024ATTACK:ics:S1165 → uses → ATTACK:ics:T0801
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5b701c8d-374a-4a6b-a695-b5c7a747ceb2
Dragos FROSTYGOOP 2024ATTACK:ics:S1165 → uses → ATTACK:ics:T0869
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5c8c8976-2cac-4185-9719-ef55c1032d6a
Dragos FROSTYGOOP 2024ATTACK:ics:S1165 → uses → ATTACK:ics:T1701
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--65b57405-c7f6-432b-83ac-9571563250db
Dragos FROSTYGOOP 2024 · Nozomi BUSTLEBERM 2024ATTACK:ics:S1165 → uses → ATTACK:ics:T0885
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--69d19946-72fb-40ce-90fb-0757df8353b5
Dragos FROSTYGOOP 2024