Operation Digital Eye
Campaign · ATTACK:enterprise:C0061
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:C0061",
"title": "Operation Digital Eye",
"type": "Campaign",
"source_url": "https://attack.mitre.org/campaigns/C0061",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "campaign--75ea699b-bff5-4541-b9b7-df4996c9db3c",
"external_id": "C0061",
"domain": "enterprise",
"created": "2026-04-19T18:07:20.152Z",
"modified": "2026-07-31T18:47:23.901Z",
"version": "1.0",
"aliases": [
"Operation Digital Eye"
],
"tactics": [
],
"source_references": [
{
"source_name": "sentinelone operationDigitalEye Dec 2024",
"url": "https://www.sentinelone.com/labs/operation-digital-eye-chinese-apt-compromises-critical-digital-infrastructure-via-visual-studio-code-tunnels/"
}
]
}Explicit source assertions (26)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:C0061 → uses → ATTACK:enterprise:S0097
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0666ab5e-7771-4f61-8c80-6a0202624caa
sentinelone operationDigitalEye Dec 2024ATTACK:enterprise:C0061 → uses → ATTACK:enterprise:T1505.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--17075ee2-67e9-42dd-a9ab-8d1d4620aab8
sentinelone operationDigitalEye Dec 2024ATTACK:enterprise:C0061 → uses → ATTACK:enterprise:T1543.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--31653a26-6af1-4f30-8b01-55eebd2b3ca7
sentinelone operationDigitalEye Dec 2024ATTACK:enterprise:C0061 → uses → ATTACK:enterprise:T1614.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--51eb6034-e6a2-4917-9276-65eb157afacc
sentinelone operationDigitalEye Dec 2024ATTACK:enterprise:C0061 → uses → ATTACK:enterprise:T1106
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--56175559-c05d-405c-b2ef-10a3acd3af61
sentinelone operationDigitalEye Dec 2024ATTACK:enterprise:C0061 → uses → ATTACK:enterprise:T1087.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--613013e5-922b-40c1-96bd-11bab2bd5447
sentinelone operationDigitalEye Dec 2024ATTACK:enterprise:C0061 → uses → ATTACK:enterprise:S0002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6392b6f0-7796-4737-9b3b-2560d754b2b5
sentinelone operationDigitalEye Dec 2024ATTACK:enterprise:C0061 → uses → ATTACK:enterprise:T1003.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--65ea5fb8-dbd5-4811-aa3f-fde412fc7688
sentinelone operationDigitalEye Dec 2024ATTACK:enterprise:C0061 → uses → ATTACK:enterprise:T1003.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--66b3723c-4738-4f3c-a0e4-b3e93eef8e9d
sentinelone operationDigitalEye Dec 2024ATTACK:enterprise:C0061 → uses → ATTACK:enterprise:S0225
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6b9f014a-fd75-49df-9355-4224c71d6761
sentinelone operationDigitalEye Dec 2024ATTACK:enterprise:C0061 → uses → ATTACK:enterprise:T1018
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6efce751-f7b8-4918-b80d-a6c77237516b
sentinelone operationDigitalEye Dec 2024ATTACK:enterprise:C0061 → uses → ATTACK:enterprise:T1569.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--83140b4e-03aa-4f6f-ad80-d1080ffafae4
sentinelone operationDigitalEye Dec 2024ATTACK:enterprise:C0061 → uses → ATTACK:enterprise:T1190
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9558b7a7-f58b-4b6f-a1f5-8a7cdab03279
sentinelone operationDigitalEye Dec 2024ATTACK:enterprise:C0061 → uses → ATTACK:enterprise:T1591
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9f6aa827-90b4-4cf5-927f-e30fbbe44cd1
sentinelone operationDigitalEye Dec 2024ATTACK:enterprise:C0061 → uses → ATTACK:enterprise:T1665
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a4327057-41ca-4055-85d6-16529b9fa625
sentinelone operationDigitalEye Dec 2024ATTACK:enterprise:C0061 → uses → ATTACK:enterprise:T1098.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b5bee386-9f09-4911-922e-8975b22f6d9c
sentinelone operationDigitalEye Dec 2024ATTACK:enterprise:C0061 → uses → ATTACK:enterprise:T1021.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b88cac7f-5bbd-466e-b044-fb0632e5e546
sentinelone operationDigitalEye Dec 2024ATTACK:enterprise:C0061 → uses → ATTACK:enterprise:T1219.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--bf3e0df1-ac5a-4915-b6ea-45b050bd0d79
sentinelone operationDigitalEye Dec 2024ATTACK:enterprise:C0061 → uses → ATTACK:enterprise:T1588.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cdb53adc-21a7-4786-8835-b0ef1ff3a95a
sentinelone operationDigitalEye Dec 2024ATTACK:enterprise:C0061 → uses → ATTACK:enterprise:S9028
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cfa2ddce-4982-43ad-80ad-8246a9f8966c
sentinelone operationDigitalEye Dec 2024ATTACK:enterprise:C0061 → uses → ATTACK:enterprise:T1070.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d2e3b3c1-965f-4344-9717-075277604d3d
sentinelone operationDigitalEye Dec 2024ATTACK:enterprise:C0061 → uses → ATTACK:enterprise:T1069.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d95c42de-dea9-4073-a4f3-c4419cf91f4e
sentinelone operationDigitalEye Dec 2024ATTACK:enterprise:C0061 → uses → ATTACK:enterprise:T1059.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--da99c162-75c7-490b-aae1-d9839a055e11
sentinelone operationDigitalEye Dec 2024ATTACK:enterprise:C0061 → uses → ATTACK:enterprise:T1036.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--de6b1b02-f96d-45b8-b358-eb2bd8abbdec
sentinelone operationDigitalEye Dec 2024ATTACK:enterprise:C0061 → uses → ATTACK:enterprise:T1033
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f0c6191b-baa5-4a81-b8f6-7c26207d9db3
sentinelone operationDigitalEye Dec 2024ATTACK:enterprise:C0061 → uses → ATTACK:enterprise:T1550.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f1078f12-fc10-42d8-9882-c8f521f3a37c
sentinelone operationDigitalEye Dec 2024