FLASHFLOOD
- ID
- S0036
- Type
- Malware
- Platforms
- Windows
- Source
- attack.mitre.org
- MITRE last modified
- 17 Nov 2024
FLASHFLOOD is malware developed by APT30 that allows propagation and exfiltration of data over removable devices. APT30 may use this capability to exfiltrate data across air-gaps. [1]
Techniques used (6)
- T1005 Data from Local System
- T1025 Data from Removable Media
- T1074.001 Local Data Staging
- T1083 File and Directory Discovery
- T1547.001 Registry Run Keys / Startup Folder
- T1560.003 Archive via Custom Method