Threat ecosystem
Actors
Malware
Campaigns
CVEs
Tap a node for a quick look · double-tap to open its profile
At a glance
peak priority 130
20 techniques
Windows
in ATT&CK since 2021-02-17
updated 2025-03-10 · v1.1
Activity by month (incidents)
2025-122026-10
Sectors targeted
health · 3government · 2technology · 2finance · 1manufacturing · 1
Countries targeted
UA · 5US · 5CA · 4AU · 3CH · 3DE · 2FR · 2NL · 2NO · 2RU · 2AM · 1AT · 1
Origin
ES · 3UA · 3AT · 2CH · 2DE · 2BE · 1
Kinds of incident
Ransomware & Extortion · 5Law Enforcement · 4Data Breach · 1
Techniques seen in incidents
Ransomware · 5Extortion · 2
ATT&CK techniques by tactic (20)
resource development
T1588.003 Code Signing Certificates
execution
T1059.003 Windows Command Shell T1106 Native API
persistence
T1112 Modify Registry
privilege escalation
T1055.001 Dynamic-link Library Injection T1134 Access Token Manipulation
discovery
T1083 File and Directory Discovery T1497.001 System Checks
impact
T1486 Data Encrypted for Impact T1489 Service Stop T1490 Inhibit System Recovery T1531 Account Access Removal T1561.001 Disk Content Wipe
defense impairment
T1112 Modify Registry T1685 Disable or Modify Tools
stealth
T1055.001 Dynamic-link Library Injection T1134 Access Token Manipulation T1140 Deobfuscate/Decode Files or Information T1218.011 Rundll32 T1497.001 System Checks