aol.pm

TA459

IntrusionSet · ATTACK:enterprise:G0062

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:enterprise:G0062",
  "title": "TA459",
  "type": "IntrusionSet",
  "source_url": "https://attack.mitre.org/groups/G0062",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "intrusion-set--62a64fd3-aaf7-4d09-a375-d6f8bb118481",
  "external_id": "G0062",
  "domain": "enterprise",
  "created": "2018-04-18T17:59:24.739Z",
  "modified": "2026-07-31T18:47:58.066Z",
  "version": "1.1",
  "aliases": [
    "TA459"
  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "TA459"
    },
    {
      "source_name": "Proofpoint TA459 April 2017",
      "url": "https://www.proofpoint.com/us/threat-insight/post/apt-targets-financial-analysts"
    }
  ]
}

Explicit source assertions (9)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:G0062 → uses → ATTACK:enterprise:S0032

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0d432cda-9684-4daa-a66f-c65ad90ff2b7

Proofpoint TA459 April 2017

ATTACK:enterprise:G0062 → uses → ATTACK:enterprise:S0033

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--63de6e73-7ec5-4cae-8d08-9c64428b52bf

Proofpoint TA459 April 2017

ATTACK:enterprise:G0062 → uses → ATTACK:enterprise:S0013

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--6e763ef9-94cb-4244-bea8-86e6d19bfb71

Proofpoint TA459 April 2017

ATTACK:enterprise:G0062 → uses → ATTACK:enterprise:T1566.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--76021528-7cb6-461a-870a-f681cac19285

Proofpoint TA459 April 2017

ATTACK:enterprise:G0062 → uses → ATTACK:enterprise:T1203

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8a9d92e5-e9b5-40bd-8cc4-c4cc5ed9fdd4

Proofpoint TA459 April 2017

ATTACK:enterprise:G0062 → uses → ATTACK:enterprise:T1059.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--927d8495-e288-4c7f-8033-0d7e85d66b10

Proofpoint TA459 April 2017

ATTACK:enterprise:G0062 → uses → ATTACK:enterprise:T1204.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--993e37d1-b81c-47d7-9063-216446271e07

Proofpoint TA459 April 2017

ATTACK:enterprise:G0062 → uses → ATTACK:enterprise:S0230

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9a29dd75-31b1-4385-beb9-e093851849f6

Proofpoint TA459 April 2017

ATTACK:enterprise:G0062 → uses → ATTACK:enterprise:T1059.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c08f55ca-366b-4554-879b-1b19042f9be8

Proofpoint TA459 April 2017

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.