Sowbug
- ID
- G0054
- Source
- attack.mitre.org
- MITRE last modified
- 1 Aug 2026
Sowbug is a threat group that has conducted targeted attacks against organizations in South America and Southeast Asia, particularly government entities, since at least 2015. [1]
Techniques used (9)
- T1003 OS Credential Dumping
- T1036.005 Match Legitimate Resource Name or Location
- T1039 Data from Network Shared Drive
- T1056.001 Keylogging
- T1059.003 Windows Command Shell
- T1082 System Information Discovery
- T1083 File and Directory Discovery
- T1135 Network Share Discovery
- T1560.001 Archive via Utility