SpicyOmelette
- ID
- S0646
- Type
- Malware
- Platforms
- Windows
- Source
- attack.mitre.org
- MITRE last modified
- 25 Apr 2025
SpicyOmelette is a JavaScript based remote access tool that has been used by Cobalt Group since at least 2018.[1]
Techniques used (11)
- T1005 Data from Local System
- T1016 System Network Configuration Discovery
- T1018 Remote System Discovery
- T1059.007 JavaScript
- T1082 System Information Discovery
- T1105 Ingress Tool Transfer
- T1204.001 Malicious Link
- T1518 Software Discovery
- T1518.001 Security Software Discovery
- T1553.002 Code Signing
- T1566.002 Spearphishing Link