Dacls
- ID
- S0497
- Type
- Malware
- Platforms
- macOS, Linux, Windows
- Source
- attack.mitre.org
- MITRE last modified
- 11 Apr 2024
Dacls is a multi-platform remote access tool used by Lazarus Group since at least December 2019.[1][2]
Techniques used (9)
- T1027.013 Encrypted/Encoded File
- T1036 Masquerading
- T1057 Process Discovery
- T1071.001 Web Protocols
- T1083 File and Directory Discovery
- T1105 Ingress Tool Transfer
- T1543.001 Launch Agent
- T1543.004 Launch Daemon
- T1564.001 Hidden Files and Directories