Chimera
IntrusionSet · ATTACK:enterprise:G0114
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:G0114",
"title": "Chimera",
"type": "IntrusionSet",
"source_url": "https://attack.mitre.org/groups/G0114",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "intrusion-set--8c1f0187-0826-4320-bddc-5f326cfcfe2c",
"external_id": "G0114",
"domain": "enterprise",
"created": "2020-08-24T17:01:55.842Z",
"modified": "2026-07-31T20:48:40.932Z",
"version": "2.2",
"aliases": [
"Chimera"
],
"tactics": [
],
"source_references": [
{
"source_name": "Chimera"
},
{
"source_name": "Cycraft Chimera April 2020",
"url": "https://cycraft.com/download/CyCraft-Whitepaper-Chimera_V4.1.pdf"
},
{
"source_name": "NCC Group Chimera January 2021",
"url": "https://web.archive.org/web/20230218064220/https://research.nccgroup.com/2021/01/12/abusing-cloud-services-to-fly-under-the-radar/"
}
]
}Explicit source assertions (65)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1574.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0390ebec-176f-421a-9823-cce48756aef1
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:S0029
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0a3dbe33-465a-421e-82ca-573d2ca25691
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1074.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--15ec2486-936e-4bb0-8265-84ba20491c05
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1053.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1ddc8822-55de-4671-8a73-c95d6383016f
Cycraft Chimera April 2020 · NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1569.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--23f36f2f-9bc4-4c95-a75b-65e5c74aed88
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1041
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2ad83456-5794-44d5-bfd1-3c51b2925c01
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1078
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2fff97fc-650c-4db5-97d4-c36db70077dd
Cycraft Chimera April 2020ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1550.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--34cb1bf0-c738-4637-84cc-c0472b105669
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1071.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--39da4f4e-e382-4db0-8184-cff27532173f
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1106
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3cf6afbd-a010-4982-8121-22e67ace6046
Cycraft Chimera April 2020ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1556.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--42edbbf4-8779-47d8-bc9b-452073939a1a
Cycraft Chimera April 2020ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1071.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--46d350be-fcde-4c7a-ac75-d86c8f5ccd5f
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1482
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--47d7a2ff-104a-49f9-a28f-6b1a79eca559
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1560.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--49fb7af8-50cf-4af5-9195-40b2351fa6dc
Cycraft Chimera April 2020 · NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1021.006
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--571c83a5-0a53-4f57-93bc-52356b6cc741
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1083
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--577a7635-c4e3-42ab-8f16-d59330fdd535
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1087.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--57da83d5-2698-41b0-92b8-a92da8a4599c
Cycraft Chimera April 2020 · NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1057
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--58207744-6e31-457e-b36e-b73d60bacd39
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:S0521
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5db02c00-0d28-4831-bad9-66737bb62eca
Cycraft Chimera April 2020ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1021.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--62a2b674-1eb3-4a9f-ac4f-2766c077eb58
Cycraft Chimera April 2020 · NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1059.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6337cf38-4b52-4e3d-a63e-670e077ec52f
Cycraft Chimera April 2020 · NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1003.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--64abef3c-d453-4782-b084-25f684b3f7ae
Cycraft Chimera April 2020 · NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1074.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--68953f34-79e2-482a-bc9a-dbe11c2839ae
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1213.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7080d506-ac77-4519-93aa-92bc490a2756
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1135
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--71cac5bb-2d68-44b8-ae8a-4d159c06ec61
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1036.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--74cc85f8-594d-428b-a44a-5ede87df0ad9
Cycraft Chimera April 2020ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1570
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--778297c2-55a2-4f80-8216-daa25bd148a9
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1007
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7944bf15-8e56-4624-8776-bc9fc5aee249
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1027.010
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--79633fcf-d22a-40f0-a9be-52fc0608825f
Cycraft Chimera April 2020ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1685.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7bbaad80-c511-4449-85ad-4c9a8fd9f847
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1016
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--817b9a3f-dec4-4269-ab36-4788c6e11c7b
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1046
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--82c8372e-9b69-4720-a351-d6f0bda110d5
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1033
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--85278437-ae97-477e-b7cf-d2bad3fd1c6e
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1087.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--85327654-1ce1-43f6-bc8b-eb6c1c83d483
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1572
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8b769a4e-8898-4995-adc1-4334dc0ec0f7
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1078.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--90c8ecca-41d2-4a28-84fe-b76c1d969363
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:S0404
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--93bc896f-d2c2-4d6b-b231-fdc084aeed69
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1069.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--95747003-2c4a-4e4a-ad9d-fde75f04f406
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1124
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9736ff6e-3b76-47be-a523-3be6076ce5eb
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1201
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--97833e2b-ae08-49c9-bc1f-b1ab03f982d2
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1049
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--98c1c7ad-db36-459a-ae63-1b92dcb209a5
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1059.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9bbc997d-9ca8-45b9-930a-5bf7e7ec00f8
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1070.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a33d759f-6106-4e67-9452-72b684ab209a
Cycraft Chimera April 2020ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1110.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a8519c68-ab22-4254-bd22-c76b71de1b9e
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1114.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a8730dc5-9f3b-449d-8b17-f5a6638aaac4
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1039
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--acb0fd33-201c-481f-857d-429c3ef67015
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1119
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b61e25f5-89cd-4c64-90e6-15b8b21a3a10
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:S0039
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b626d35a-2ddd-425a-97bc-84c328b57726
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1133
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--bd8a36f5-1da5-49de-b292-ac0e4a58340c
Cycraft Chimera April 2020 · NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:S0002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--be49ddce-5925-4fb2-8822-0b665d9aa812
Cycraft Chimera April 2020 · NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1110.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--bfc3568d-1304-43ce-be97-5fc4209d8a79
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1680
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c3556085-d0ed-41dc-9ed4-a0a0c65ee104
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1114.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c43ac3ee-be59-419e-8ea2-43c04923102f
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1012
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c495478b-6bae-4d1e-a43e-be07fe7cdb48
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1588.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cb909b8f-59ba-4edd-ac04-7d9fafdcfe89
Cycraft Chimera April 2020 · NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1567.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d17fcc24-a9ae-4841-b35b-f694b3991fba
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1070.006
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d275fe0c-3769-4fb1-80ee-2f8477019123
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1018
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d45cd2ee-f0f6-417a-98c2-9a7e9f6dc480
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1589.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ddc692ea-33e8-493d-a5e3-ce0de48da15c
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1047
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e40a416e-ca15-4c15-b469-20549b81e6bd
Cycraft Chimera April 2020 · NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1021.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e87cff7f-dc75-4dfc-9c45-ec697ff4644a
Cycraft Chimera April 2020ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1111
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e925337d-e878-48ad-a53c-3a3f4656849e
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1217
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f01bad7e-e96c-43fe-8ac9-63c4863e8c76
NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:S0154
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f7120568-70db-4111-985c-9970775206c1
Cycraft Chimera April 2020 · NCC Group Chimera January 2021ATTACK:enterprise:G0114 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f94c1c97-ec5d-4703-93c1-91de05761d2a
Cycraft Chimera April 2020