ATT&CK ReferencesTrendMicro New Andariel Tactics July 2018

TrendMicro New Andariel Tactics July 2018

Chen, Joseph. (2018, July 16). New Andariel Reconnaissance Tactics Uncovered. Retrieved September 29, 2021.

Techniques0

Not cited by any technique.

None recorded.

None recorded.

Technique	Used by	Procedure example
T1189 Drive-by Compromise	GroupAndariel	Andariel has used watering hole attacks, often with zero-day exploits, to gain initial access to victims within a specific IP range. AhnLab Andariel Subgroup of Lazarus June 2018 TrendMicro New Andariel Tactics July 2018
T1203 Exploitation for Client Execution	GroupAndariel	Andariel has exploited numerous ActiveX vulnerabilities, including zero-days. FSI Andariel Campaign Rifle July 2017 IssueMakersLab Andariel GoldenAxe May 2017 TrendMicro New Andariel Tactics July 2018
T1592.002 Software	GroupAndariel	Andariel has inserted a malicious script within compromised websites to collect potential victim information such as browser type, system language, Flash Player version, and other data. TrendMicro New Andariel Tactics July 2018

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.