C0026
Campaign · ATTACK:enterprise:C0026
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:C0026",
"title": "C0026",
"type": "Campaign",
"source_url": "https://attack.mitre.org/campaigns/C0026",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "campaign--c89fa3ff-4773-4daf-8aec-d8f43f10116e",
"external_id": "C0026",
"domain": "enterprise",
"created": "2023-05-15T19:17:48.880Z",
"modified": "2026-07-31T18:47:32.005Z",
"version": "1.0",
"aliases": [
"C0026"
],
"tactics": [
],
"source_references": [
{
"source_name": "Mandiant Suspected Turla Campaign February 2023",
"url": "https://www.mandiant.com/resources/blog/turla-galaxy-opportunity"
}
]
}Explicit source assertions (12)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:C0026 → uses → ATTACK:enterprise:S0039
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--35646501-5bff-41bb-a50f-c4f3b1d326f9
Mandiant Suspected Turla Campaign February 2023ATTACK:enterprise:C0026 → uses → ATTACK:enterprise:S1074
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--36f057c1-6f80-4254-963b-79704bbe6232
Mandiant Suspected Turla Campaign February 2023ATTACK:enterprise:C0026 → uses → ATTACK:enterprise:T1030
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--42d043a1-0b6f-4acd-aea2-553579eb49c2
Mandiant Suspected Turla Campaign February 2023ATTACK:enterprise:C0026 → uses → ATTACK:enterprise:T1568
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6d550704-4ccb-485b-8e79-519d13768afa
Mandiant Suspected Turla Campaign February 2023ATTACK:enterprise:C0026 → uses → ATTACK:enterprise:T1560.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--929a1429-88a6-4ac8-b92e-39f242b1e0d6
Mandiant Suspected Turla Campaign February 2023ATTACK:enterprise:C0026 → uses → ATTACK:enterprise:T1583.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--94dc4d8d-c6a9-4b0a-9562-07cdf0347805
Mandiant Suspected Turla Campaign February 2023ATTACK:enterprise:C0026 → uses → ATTACK:enterprise:S1076
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9b56f86f-656f-4e18-9557-84638de34f10
Mandiant Suspected Turla Campaign February 2023ATTACK:enterprise:C0026 → uses → ATTACK:enterprise:S0104
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a0bf4e01-2df1-4256-90fe-a504c76c6baf
Mandiant Suspected Turla Campaign February 2023ATTACK:enterprise:C0026 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a8fd0806-56eb-4438-bcce-18f7851a07c6
Mandiant Suspected Turla Campaign February 2023ATTACK:enterprise:C0026 → uses → ATTACK:enterprise:S1075
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--dc71c59d-1c71-480a-97de-972248489aa4
Mandiant Suspected Turla Campaign February 2023ATTACK:enterprise:C0026 → uses → ATTACK:enterprise:S0099
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e0a83a2e-f0c5-4d3d-b053-9a56ef9f7b8e
Mandiant Suspected Turla Campaign February 2023ATTACK:enterprise:C0026 → uses → ATTACK:enterprise:T1005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ff746d3d-2ebe-46e9-87f6-5ddd8abbfda3
Mandiant Suspected Turla Campaign February 2023