MirrorFace
IntrusionSet · ATTACK:enterprise:G1054
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:G1054",
"title": "MirrorFace",
"type": "IntrusionSet",
"source_url": "https://attack.mitre.org/groups/G1054",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "intrusion-set--8cf6e33b-b6ef-4a1f-a77c-0ecdde93161f",
"external_id": "G1054",
"domain": "enterprise",
"created": "2026-04-17T12:01:07.688Z",
"modified": "2026-07-31T18:48:07.598Z",
"version": "1.0",
"aliases": [
"MirrorFace",
"Earth Kasha"
],
"tactics": [
],
"source_references": [
{
"source_name": "Earth Kasha"
},
{
"source_name": "ESET MirrorFace DEC 2022",
"url": "https://www.welivesecurity.com/2022/12/14/unmasking-mirrorface-operation-liberalface-targeting-japanese-political-entities/"
},
{
"source_name": "Trend Micro Earth Kasha Updates APR 2025",
"url": "https://www.trendmicro.com/en_us/research/25/d/earth-kasha-updates-ttps.html"
},
{
"source_name": "Kaspersky LODEINFO OCT 2022",
"url": "https://securelist.com/apt10-tracking-down-lodeinfo-2022-part-i/107742/"
},
{
"source_name": "Kaspersky LODEINFO Part II OCT 2022",
"url": "https://securelist.com/apt10-tracking-down-lodeinfo-2022-part-ii/107745/"
},
{
"source_name": "JPCERT MirrorFace JUL 2024",
"url": "https://blogs.jpcert.or.jp/en/2024/07/mirrorface-attack-against-japanese-organisations.html"
},
{
"source_name": "Trend Micro Earth Kasha NOV 2024",
"url": "https://www.trendmicro.com/en_us/research/24/k/lodeinfo-campaign-of-earth-kasha.html"
}
]
}Explicit source assertions (60)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1566.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--04b1f1a3-b46b-4af9-b21a-3e1047d2844e
Trend Micro Earth Kasha Updates APR 2025ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:S0039
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--087ce3ec-8c2b-4035-8b47-4ea17eb45746
JPCERT MirrorFace JUL 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1057
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--08cdfbc3-eefb-44a2-9ec1-59b2dbc76392
JPCERT MirrorFace JUL 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:S0154
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--08fa7188-a43c-4b13-bbe7-af8f04f5b6e9
Trend Micro Earth Kasha NOV 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:S9022
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0ef43f4a-6781-4e70-a09c-368283ab411c
ESET MirrorFace DEC 2022ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1686.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--13bac5f1-7111-4025-901b-aa99823b9f53
JPCERT MirrorFace JUL 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:S0275
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--16bcab8b-fc91-42a4-a831-7e384f906f42
Trend Micro Earth Kasha Updates APR 2025ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1074.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1b901882-8821-47c0-b85f-7689225eca34
Trend Micro Earth Kasha NOV 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1685
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1ccfc450-d4a7-464d-aa95-f2dddf2f9652
JPCERT MirrorFace JUL 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1087.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1e5c4c77-5e8b-4fe0-95f8-251f5a1f6fc0
Trend Micro Earth Kasha NOV 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1614.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--23d11b47-6a99-47ee-bdb5-c6d1dc558782
ITOCHU LODEINFO JAN 2024ATTACK:enterprise:C0060 → attributed-to → ATTACK:enterprise:G1054
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2611f491-1c9d-4c2a-82da-8a9bcfc31870
ESET MirrorFace 2025 · Trend Micro Earth Kasha Anel NOV 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:S0359
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2737dbc8-1418-42b3-b509-d9f60c15a839
Trend Micro Earth Kasha NOV 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1591
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--29d8bf9e-da2f-4a82-9cbb-765cade6a58a
ESET MirrorFace DEC 2022ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:S0190
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--32bb25d2-78af-4480-be95-d27ca81c3216
JPCERT MirrorFace JUL 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1090
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3504541e-cfcf-4b92-9de1-d34f1e814d40
JPCERT MirrorFace JUL 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:S0057
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--36e92e54-f1be-485e-b9da-ec5197f9a000
JPCERT MirrorFace JUL 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1685.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3c7e4671-97ef-4822-b0dd-a8288b1c6735
JPCERT MirrorFace JUL 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1021.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3da32080-805c-4388-8490-039f1195ab23
Trend Micro Earth Kasha NOV 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1587.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3e4011f8-05cc-422a-9daf-63f7c25fd772
ESET MirrorFace DEC 2022ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1070.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--425b70b5-c809-4d74-a5d8-d159a6564b21
ESET MirrorFace DEC 2022 · Trend Micro Earth Kasha Updates APR 2025 · JPCERT MirrorFace JUL 2024 · Trend Micro Earth Kasha NOV 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1003.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--44262e7a-8121-4679-a476-2d09279b7f92
JPCERT MirrorFace JUL 2024 · Trend Micro Earth Kasha NOV 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1083
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--44356f01-27ae-45f5-b37f-85ce8c22fa44
ESET MirrorFace DEC 2022 · JPCERT MirrorFace JUL 2024 · Trend Micro Earth Kasha NOV 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1482
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--513d7cf7-8eb7-49e8-8c74-b164ff404760
Trend Micro Earth Kasha NOV 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1684.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5b8730a2-45ea-4811-aabd-a764cc0261a9
ESET MirrorFace DEC 2022ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1588.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--61ede1a5-e9e1-402b-8a64-11e9a3136675
ESET MirrorFace DEC 2022 · JPCERT MirrorFace JUL 2024 · Trend Micro Earth Kasha NOV 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1003.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--63aa99ad-a780-44ca-acf3-3bc827fabd8b
JPCERT MirrorFace JUL 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:S0100
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--660d5be1-468a-4a49-a026-a2da5439c964
JPCERT MirrorFace JUL 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1204.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6b5d4e83-6ca4-4fa9-94a7-4068fcc8d3e6
ESET MirrorFace DEC 2022 · Trend Micro Earth Kasha Updates APR 2025 · Kaspersky LODEINFO OCT 2022 · ITOCHU LODEINFO JAN 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:S9020
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6cceaffa-6408-43f9-b090-96360c5635dc
Kaspersky LODEINFO OCT 2022 · ITOCHU LODEINFO JAN 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1018
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7ad1773a-34ba-498a-ab63-9dea0181f8f8
JPCERT MirrorFace JUL 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1016
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7f705b8d-b59e-415d-97bd-ab45bdd5f39b
JPCERT MirrorFace JUL 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1553.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--82b60e81-eb9a-4159-91ce-87cbb634bb6e
ESET MirrorFace DEC 2022ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9284cd45-dca9-4831-b118-36eae1fffd70
Trend Micro Earth Kasha NOV 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1059.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--94ff7939-a6fb-483d-bee2-a242a43e32f6
Trend Micro Earth Kasha Updates APR 2025 · JPCERT MirrorFace JUL 2024 · Trend Micro Earth Kasha NOV 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1566.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--960b8079-bc54-4bc1-841e-7e5a80c772a3
ESET MirrorFace DEC 2022 · Kaspersky LODEINFO OCT 2022 · ITOCHU LODEINFO JAN 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1059.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9798bf23-a61d-414d-ad94-e46f5fc93558
ITOCHU LODEINFO JAN 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1007
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a79d18de-bfcc-4b15-b50e-2dc9d707ec58
JPCERT MirrorFace JUL 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:S9026
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a8aaec5a-fc14-421e-89b2-fb6dddb68f35
Trend Micro Earth Kasha Updates APR 2025ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:S9021
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ad586838-f312-4956-94e4-2c80b653430f
Kaspersky LODEINFO OCT 2022ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:S0102
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b05e8550-962b-4f1b-9cb8-e052f1f080a0
JPCERT MirrorFace JUL 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1082
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b6c71a79-0909-4a01-b026-306040e0da44
ITOCHU LODEINFO JAN 2024 · JPCERT MirrorFace JUL 2024 · Trend Micro Earth Kasha NOV 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1048.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c674acca-abe0-47c0-9947-e95442f3c8e0
JPCERT MirrorFace JUL 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1574.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ca096580-4153-4d47-ae46-2de54a033396
ESET MirrorFace DEC 2022 · Kaspersky LODEINFO OCT 2022 · ITOCHU LODEINFO JAN 2024 · Trend Micro Earth Kasha NOV 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1021.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ca4d13b8-73e2-4eaa-94be-952f609c422f
JPCERT MirrorFace JUL 2024 · Trend Micro Earth Kasha NOV 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1071.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--caad197f-4ef9-4239-8f4e-61b9b69e5449
ESET MirrorFace DEC 2022ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:S9023
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cc810d96-93b9-4994-bf0c-75f45da663a0
ESET HiddenFace 2024 · JPCERT MirrorFace JUL 2024 · Trend Micro Earth Kasha NOV 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1190
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cebc9afb-0f47-4fb5-b3f4-53aa59653a83
JPCERT MirrorFace JUL 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1036.008
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d5c2492e-d619-4225-9a73-40d226770d73
ITOCHU LODEINFO JAN 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1003.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d63bfe4b-634b-4702-953a-7865ef564dce
JPCERT MirrorFace JUL 2024 · Trend Micro Earth Kasha NOV 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1560.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d7d1b763-5430-463a-bd2c-eb14001e2c64
ESET MirrorFace DEC 2022 · JPCERT MirrorFace JUL 2024 · Trend Micro Earth Kasha NOV 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1221
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--dacaf6d1-5bfa-45ff-9c6c-6c19a8bef409
ITOCHU LODEINFO JAN 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:S0097
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--dc253840-25d8-4080-9668-fde2fc3e4173
JPCERT MirrorFace JUL 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1556.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--dc320d6e-1387-46ec-af08-d131a7400f5d
ESET MirrorFace DEC 2022ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1047
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--dd9f0b9b-a1f9-4cd7-a80f-69ae0b52af95
JPCERT MirrorFace JUL 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1114.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e29acb85-fcd0-4286-b4bb-7ac2c8d72a5b
ESET MirrorFace DEC 2022ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1027.013
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e35811f1-59ae-4baa-978d-e1a9b8029bbc
ITOCHU LODEINFO JAN 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:S0645
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e3888f07-1a1a-442a-8492-ff3c807df9f6
JPCERT MirrorFace JUL 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:T1033
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ee3c7d3c-f7c9-4165-af4b-ebc45a7aae3f
Trend Micro Earth Kasha NOV 2024ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:S9025
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--fdcfa894-cc4a-421e-9025-159293478bef
Trend Micro Earth Kasha NOV 2024