TA459

· ATT&CK GroupG0062

Techniques

Software

Tactics

Aliases

Description

TA459 is a threat group believed to operate out of China that has targeted countries including Russia, Belarus, Mongolia, and others. (Citation: Proofpoint TA459 April 2017)

Tactic Coverage

execution (4)initial access (1)

Techniques Used (5)

T1059.001PowerShell

execution

T1059.005Visual Basic

execution

T1203Exploitation for Client Execution

execution

T1204.002Malicious File

execution

T1566.001Spearphishing Attachment

initial access

Software Used (4)

S0033NetTravelermalware S0013PlugXmalware S0230ZeroTmalware S0032gh0st RATmalware

References (3)

https://attack.mitre.org/groups/G0062 https://www.proofpoint.com/us/threat-insight/post/apt-targets-financial-analysts