Skip to content

Frankenstein

Campaign · ATTACK:enterprise:C0001

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance

{
  "id": "ATTACK:enterprise:C0001",
  "title": "Frankenstein",
  "type": "Campaign",
  "source_url": "https://attack.mitre.org/campaigns/C0001",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "campaign--26d9ebae-de59-427f-ae9a-349456bae4b1",
  "external_id": "C0001",
  "domain": "enterprise",
  "created": "2022-09-07T13:40:09.750Z",
  "modified": "2026-07-31T18:47:18.256Z",
  "version": "1.1",
  "aliases": [
    "Frankenstein"
  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "Talos Frankenstein June 2019",
      "url": "https://blog.talosintelligence.com/2019/06/frankenstein-campaign.html"
    }
  ]
}

Explicit source assertions (28)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:C0001 → uses → ATTACK:enterprise:T1057

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--08052557-0aa5-49d0-9254-722e4f04804f

Talos Frankenstein June 2019

ATTACK:enterprise:C0001 → uses → ATTACK:enterprise:T1082

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--191aac5f-38bc-429b-8343-32eb17fa4919

Talos Frankenstein June 2019

ATTACK:enterprise:C0001 → uses → ATTACK:enterprise:T1027.010

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--29883758-034d-4811-9145-9e12652edf66

Talos Frankenstein June 2019

ATTACK:enterprise:C0001 → uses → ATTACK:enterprise:T1020

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2caa19fb-fe02-4365-b53a-1ff554a13889

Talos Frankenstein June 2019

ATTACK:enterprise:C0001 → uses → ATTACK:enterprise:S0363

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2cf01fbd-c940-4152-8173-bae63f37aedd

Talos Frankenstein June 2019

ATTACK:enterprise:C0001 → uses → ATTACK:enterprise:T1053.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--3cfb23f1-ae6c-4ba9-acf0-b5e592ea5597

Talos Frankenstein June 2019

ATTACK:enterprise:C0001 → uses → ATTACK:enterprise:T1204.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--42f078b7-f1ad-4507-9774-a4673a4c4acd

Talos Frankenstein June 2019

ATTACK:enterprise:C0001 → uses → ATTACK:enterprise:T1566.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--45f64e39-c3f8-4665-8433-af9503852e53

Talos Frankenstein June 2019

ATTACK:enterprise:C0001 → uses → ATTACK:enterprise:T1105

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4c39d715-d631-41fc-b015-0df20d0507d5

Talos Frankenstein June 2019

ATTACK:enterprise:C0001 → uses → ATTACK:enterprise:T1059.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4dea60e2-5339-4aed-b9a8-5ebf6af2f431

Talos Frankenstein June 2019

ATTACK:enterprise:C0001 → uses → ATTACK:enterprise:T1518.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5449b7c0-73f8-474f-8444-0182112d7c57

Talos Frankenstein June 2019

ATTACK:enterprise:C0001 → uses → ATTACK:enterprise:T1059.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--59de6826-2503-422d-9e53-b3c0a43738dd

Talos Frankenstein June 2019

ATTACK:enterprise:C0001 → uses → ATTACK:enterprise:T1071.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--65325613-a4c1-4cd5-9e3c-ef48146891b3

Talos Frankenstein June 2019

ATTACK:enterprise:C0001 → uses → ATTACK:enterprise:T1221

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7457d1f4-9829-4f60-a12e-e6b9952b55f1

Talos Frankenstein June 2019

ATTACK:enterprise:C0001 → uses → ATTACK:enterprise:T1203

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7dd876da-7f2b-4bdb-9cc1-424dd53dd6cd

Talos Frankenstein June 2019

ATTACK:enterprise:C0001 → uses → ATTACK:enterprise:T1059.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--88b934e6-7620-49dd-a5a4-ce92c5d42b30

Talos Frankenstein June 2019

ATTACK:enterprise:C0001 → uses → ATTACK:enterprise:T1497.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--92cf3ea9-3499-4e12-b885-fcb43e0107ff

Talos Frankenstein June 2019

ATTACK:enterprise:C0001 → uses → ATTACK:enterprise:T1047

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9ef2a5a7-3be8-426a-8411-ca78e35cef3a

Talos Frankenstein June 2019

ATTACK:enterprise:C0001 → uses → ATTACK:enterprise:T1119

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ab431fe4-eb1b-48ed-a105-7d50b8d0beda

Talos Frankenstein June 2019

ATTACK:enterprise:C0001 → uses → ATTACK:enterprise:T1036.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b84a9cf4-976d-452d-8de0-76e318078a5c

Talos Frankenstein June 2019

ATTACK:enterprise:C0001 → uses → ATTACK:enterprise:T1005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--bb7c9ed8-1733-4c81-8952-2196935571ef

Talos Frankenstein June 2019

ATTACK:enterprise:C0001 → uses → ATTACK:enterprise:T1041

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--cbc251b7-5541-408f-b11d-c57d600fc8cf

Talos Frankenstein June 2019

ATTACK:enterprise:C0001 → uses → ATTACK:enterprise:T1016

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d84d46d9-658e-4a88-a3f3-616ce6c47535

Talos Frankenstein June 2019

ATTACK:enterprise:C0001 → uses → ATTACK:enterprise:T1140

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d87615c7-501a-4b78-87fb-ba2c1a2faffb

Talos Frankenstein June 2019

ATTACK:enterprise:C0001 → uses → ATTACK:enterprise:T1588.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e5757ac1-2887-4492-9f9e-3c5e2c9994ff

Talos Frankenstein June 2019

ATTACK:enterprise:C0001 → uses → ATTACK:enterprise:T1127.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e875898e-fa8e-41f9-90da-79cdfb748dba

Talos Frankenstein June 2019

ATTACK:enterprise:C0001 → uses → ATTACK:enterprise:T1033

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f3faf032-132b-421b-adea-2e95f214807f

Talos Frankenstein June 2019

ATTACK:enterprise:C0001 → uses → ATTACK:enterprise:T1573.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--fa426e9e-7e77-4c1b-b03c-00a4ae45ac6c

Talos Frankenstein June 2019

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.