Threat Group Cards: A Threat Actor Encyclopedia
Excerpt
Home > List all groups > List all tools > List all groups using tool KARAE Tool: KARAE
Names KARAE
Category Malware
Type Reconnaissance, Backdoor, Info stealer, Exfiltration
Description
(FireEye) Karae backdoors are typically used as first-stage malware after an initial compromise. The backdoors can collect system information, upload and download files, and may be used to retrieve a second-stage payload. The malware uses public cloud-based storage providers for command and control. In March 2016, KARAE malware was distributed through torrent file-sharing websites for South Korean users. During this campaign, the malware used a YouTube video downloader application as a lure.
Information MITRE ATT&CK Last chan…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by ETDA Threat Group Cards on apt.etda.or.th.
More from ETDA Threat Group Cards19
- Threat Group Cards: A Threat Actor EncyclopediaETDA Threat Group Cards · Added 25 Oct
- Threat Group Cards: A Threat Actor EncyclopediaETDA Threat Group Cards · Added 20 Oct
- listgroups.cgi?u=72670111-f95a-423c-a296-f424939cc08eETDA Threat Group Cards · Added 19 Oct
- listgroups.cgi?u=cacc4de8-a9b2-4231-9fdb-8aefa8ed0a5cETDA Threat Group Cards · Added 19 Oct
On the same topics
- Lorem Ipsum Revisited: ClickFix Pivot & Rapid BrigantineBlueVoyant · Added 25 Oct
- From PostCSS Masquerading to Windows RATJFrog · Published 22 Jun
- Showboat Malware: Emerging Threats Targeting Telecom ProvidersLumen Black Lotus Labs · Added 25 Oct
- International law enforcement initiate hunt on malware group SocGholishDutch National Police · Published 18 Jun
