MITRE ATT&CK / Software / S0410

Fysbis

ID

S0410

Type

Malware

Platforms

Linux

Source

attack.mitre.org

MITRE last modified

11 Apr 2024

Techniques used (12)

• T1027.013 Encrypted/Encoded File
• T1036.004 Masquerade Task or Service
• T1036.005 Match Legitimate Resource Name or Location
• T1056.001 Keylogging
• T1057 Process Discovery
• T1059.004 Unix Shell
• T1070.004 File Deletion
• T1082 System Information Discovery
• T1083 File and Directory Discovery
• T1132.001 Standard Encoding
• T1543.002 Systemd Service
• T1547.013 XDG Autostart Entries

Groups using it (1)

• G0007 APT28

References

1. Fysbis Palo Alto Analysis