MITRE ATT&CK / Software / S1192
NICECURL
- ID
- S1192
- Type
- Malware
- Platforms
- Windows
- Source
- attack.mitre.org
- MITRE last modified
- 9 Jan 2025
NICECURL is a VBScript-based backdoor used by APT42 to download additional modules.[1]
Techniques used (5)
Groups using it (1)
References
- Mandiant APT42-untangling