Threat ecosystem
Actors
Malware
Campaigns
CVEs
No related entities found yet.
At a glance
peak priority 120
14 techniques
1 groups use it
Windows
in ATT&CK since 2020-06-29
updated 2025-04-16 · v1.2
Activity by month (incidents)
2026-102026-10
Sectors targeted
media · 1
Countries targeted
JP · 2LA · 1
Kinds of incident
Data Breach · 3
Techniques seen in incidents
Ransomware · 3Data Breach · 2Phishing · 2T1589.002 - Email Addresses · 1
ATT&CK techniques by tactic (14)
execution
T1059.003 Windows Command Shell T1569.002 Service Execution
persistence
T1543.003 Windows Service
privilege escalation
T1543.003 Windows Service
discovery
T1120 Peripheral Device Discovery T1614 System Location Discovery
impact
T1486 Data Encrypted for Impact T1489 Service Stop T1490 Inhibit System Recovery
defense impairment
T1685 Disable or Modify Tools
stealth
T1218.007 Msiexec T1218.010 Regsvr32 T1218.011 Rundll32 T1564.006 Run Virtual Instance
Groups that use it
FIN8