Dok
- ID
- S0281
- Type
- Malware
- Associated names
- Retefe
- Platforms
- macOS
- Source
- attack.mitre.org
- MITRE last modified
- 18 Nov 2024
Dok is a Trojan application disguised as a .zip file that is able to collect user credentials and install a malicious proxy server to redirect a user's network traffic (i.e. Adversary-in-the-Middle).[1][2][3]
Techniques used (11)
- T1027.002 Software Packing
- T1048.003 Exfiltration Over Unencrypted Non-C2 Protocol
- T1056.002 GUI Input Capture
- T1059.002 AppleScript
- T1090.003 Multi-hop Proxy
- T1222.002 Linux and Mac Permissions
- T1543.001 Launch Agent
- T1547.015 Login Items
- T1548.003 Sudo and Sudo Caching
- T1553.004 Install Root Certificate
- T1557 Adversary-in-the-Middle