Leviathan Australian Intrusions
Campaign · ATTACK:enterprise:C0049
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:C0049",
"title": "Leviathan Australian Intrusions",
"type": "Campaign",
"source_url": "https://attack.mitre.org/campaigns/C0049",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "campaign--b66bc597-399c-4e4d-828a-1ed4a7f1fb15",
"external_id": "C0049",
"domain": "enterprise",
"created": "2025-02-03T19:41:59.392Z",
"modified": "2026-07-31T18:47:32.005Z",
"version": "1.0",
"aliases": [
"Leviathan Australian Intrusions"
],
"tactics": [
],
"source_references": [
{
"source_name": "CISA Leviathan 2024",
"url": "https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-190a"
}
]
}Explicit source assertions (27)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:C0049 → uses → ATTACK:enterprise:T1021.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0a9bd6e2-f367-4403-82b1-ab4b484359b2
CISA Leviathan 2024ATTACK:enterprise:C0049 → uses → ATTACK:enterprise:T1074.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0ce76eff-085b-47c7-bce4-144d4b4252fc
CISA Leviathan 2024ATTACK:enterprise:C0049 → uses → ATTACK:enterprise:T1615
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--11df82f4-a3e8-4792-90f3-1787f05f0a5e
CISA Leviathan 2024ATTACK:enterprise:C0049 → uses → ATTACK:enterprise:T1213.006
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--177a712f-3f52-49b6-8cf3-981991fd5e69
CISA Leviathan 2024ATTACK:enterprise:C0049 → uses → ATTACK:enterprise:T1552
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1f29d292-9d2a-438d-8b8b-c9838e62b045
CISA Leviathan 2024ATTACK:enterprise:C0049 → uses → ATTACK:enterprise:T1078.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--250eabe6-6a1f-4c07-a5d4-5d1aceb3a961
CISA Leviathan 2024ATTACK:enterprise:C0049 → uses → ATTACK:enterprise:T1686
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2b11b20a-2b25-417f-8826-0fef4336ebfc
CISA Leviathan 2024ATTACK:enterprise:C0049 → uses → ATTACK:enterprise:T1552.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--37dd2d5d-83c3-4d13-ac68-c1dd8f776c51
CISA Leviathan 2024ATTACK:enterprise:C0049 → uses → ATTACK:enterprise:T1082
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3d2ef7e3-419b-47d6-9779-65cfd0f0b86c
CISA Leviathan 2024ATTACK:enterprise:C0049 → uses → ATTACK:enterprise:T1018
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--52ec8e9e-4276-4793-bc9b-76c312cba5cd
CISA Leviathan 2024ATTACK:enterprise:C0049 → uses → ATTACK:enterprise:T1190
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--57b386c4-5322-4e5b-a8a9-37d68a75f4c0
CISA Leviathan 2024ATTACK:enterprise:C0049 → uses → ATTACK:enterprise:T1558.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6181f0b4-be28-4612-b45d-b94c851ebb56
CISA Leviathan 2024ATTACK:enterprise:C0049 → uses → ATTACK:enterprise:T1041
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6862a553-961b-4def-86ed-3c7527bda572
CISA Leviathan 2024ATTACK:enterprise:C0049 → uses → ATTACK:enterprise:T1482
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6cc4b0dc-d6ec-4d33-81c2-698d0923c752
CISA Leviathan 2024ATTACK:enterprise:C0049 → attributed-to → ATTACK:enterprise:G0065
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--920874f2-f1e1-4981-9469-4ee45b6218a7
CISA Leviathan 2024ATTACK:enterprise:C0049 → uses → ATTACK:enterprise:T1135
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9ce73f8c-85c0-45ee-93a2-11475e14de19
CISA Leviathan 2024ATTACK:enterprise:C0049 → uses → ATTACK:enterprise:T1594
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9d992708-bfc2-4c9c-95d2-d12b49985986
CISA Leviathan 2024ATTACK:enterprise:C0049 → uses → ATTACK:enterprise:T1078
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9e91dca0-256b-48a0-97af-4d9bd6802bac
CISA Leviathan 2024ATTACK:enterprise:C0049 → uses → ATTACK:enterprise:T1056
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a923dc9f-1a0c-4f1c-ad52-4c07011afcf1
CISA Leviathan 2024ATTACK:enterprise:C0049 → uses → ATTACK:enterprise:T1505.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--af846746-077c-4696-b15a-1221914bf15b
CISA Leviathan 2024ATTACK:enterprise:C0049 → uses → ATTACK:enterprise:T1078.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c9f76562-98c9-4f58-a9ea-790cf792490a
CISA Leviathan 2024ATTACK:enterprise:C0049 → uses → ATTACK:enterprise:T1068
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cc27e415-6fd8-410e-8469-888959cf5a27
CISA Leviathan 2024ATTACK:enterprise:C0049 → uses → ATTACK:enterprise:T1528
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--dc4faebd-ef8a-40ae-8d4c-e1f75aca123b
CISA Leviathan 2024ATTACK:enterprise:C0049 → uses → ATTACK:enterprise:T1111
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--dde3cae1-3541-4a6f-a945-4bf5d3a391c3
CISA Leviathan 2024ATTACK:enterprise:C0049 → uses → ATTACK:enterprise:T1021.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e4b22c3e-24ae-4606-bd51-1f934f85034e
CISA Leviathan 2024ATTACK:enterprise:C0049 → uses → ATTACK:enterprise:T1212
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e6720572-b3ab-4e25-8cee-51d8c3e81dce
CISA Leviathan 2024ATTACK:enterprise:C0049 → uses → ATTACK:enterprise:T1588.006
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e9e4e756-ab1e-4b60-9bc6-7ceb54834970
CISA Leviathan 2024