aol.pm

DustySky

Software · ATTACK:enterprise:S0062

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:enterprise:S0062",
  "title": "DustySky",
  "type": "Software",
  "source_url": "https://attack.mitre.org/software/S0062",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "malware--687c23e4-4e25-4ee7-a870-c5e002511f54",
  "external_id": "S0062",
  "domain": "enterprise",
  "created": "2017-05-31T21:32:41.750Z",
  "modified": "2025-04-25T14:43:38.466Z",
  "version": "1.1",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "DustySky",
      "url": "https://www.clearskysec.com/wp-content/uploads/2016/01/Operation%20DustySky_TLP_WHITE.pdf"
    },
    {
      "source_name": "DustySky2",
      "url": "http://www.clearskysec.com/wp-content/uploads/2016/06/Operation-DustySky2_-6.2016_TLP_White.pdf"
    },
    {
      "source_name": "Kaspersky MoleRATs April 2019",
      "url": "https://securelist.com/gaza-cybergang-group1-operation-sneakypastes/90068/"
    }
  ]
}

Explicit source assertions (20)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:S0062 → uses → ATTACK:enterprise:T1071.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2892eada-7633-4428-80e0-0e965d5faf5c

DustySky

ATTACK:enterprise:S0062 → uses → ATTACK:enterprise:T1518

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2b89f806-5b78-4599-9536-13b47c35d26d

Kaspersky MoleRATs April 2019

ATTACK:enterprise:S0062 → uses → ATTACK:enterprise:T1070.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--339e60fc-f94c-4b51-bc78-846c29c4340d

Kaspersky MoleRATs April 2019

ATTACK:enterprise:G0021 → uses → ATTACK:enterprise:S0062

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--3cdc74fc-a291-4253-98b4-ca33e021914a

DustySky · DustySky2 · Kaspersky MoleRATs April 2019

ATTACK:enterprise:S0062 → uses → ATTACK:enterprise:T1091

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--3eb29574-145d-4d4a-b4c6-e94b8a79781e

DustySky

ATTACK:enterprise:S0062 → uses → ATTACK:enterprise:T1027

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--40772ec1-2f25-425f-aad5-635f64ba8fd2

DustySky

ATTACK:enterprise:S0062 → uses → ATTACK:enterprise:T1560.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--51300de6-0f80-45dc-92f7-f48dbc887d8c

Kaspersky MoleRATs April 2019

ATTACK:enterprise:S0062 → uses → ATTACK:enterprise:T1041

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5434447a-d954-4106-9657-ee62a4acf27b

Kaspersky MoleRATs April 2019

ATTACK:enterprise:S0062 → uses → ATTACK:enterprise:T1056.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5e2e672a-02d4-4510-a629-942d44a558f1

DustySky

ATTACK:enterprise:S0062 → uses → ATTACK:enterprise:T1120

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--62a7f7c2-435d-4ef6-aee3-add933fb241d

Kaspersky MoleRATs April 2019

ATTACK:enterprise:S0062 → uses → ATTACK:enterprise:T1047

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--6a58662b-4eb1-4172-b387-13e9b574368a

DustySky

ATTACK:enterprise:S0062 → uses → ATTACK:enterprise:T1074.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7e7c0aa8-a17e-4079-b1fd-188977cf1a6e

Kaspersky MoleRATs April 2019

ATTACK:enterprise:S0062 → uses → ATTACK:enterprise:T1547.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9a7ff784-436b-40c5-bfb0-25e02e1d9940

DustySky

ATTACK:enterprise:S0062 → uses → ATTACK:enterprise:T1113

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a724a449-cd4d-419a-90a0-cdd5927c60b7

Kaspersky MoleRATs April 2019

ATTACK:enterprise:S0062 → uses → ATTACK:enterprise:T1518.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ad50f322-18b6-43c7-bf6b-f77f4932fdad

DustySky

ATTACK:enterprise:S0062 → uses → ATTACK:enterprise:T1570

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ad5f49b0-8b92-43d1-99f3-c691ccb7a8ac

DustySky

ATTACK:enterprise:S0062 → uses → ATTACK:enterprise:T1008

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b2ab26e2-eb90-4f19-b35a-b8a0a5438961

DustySky

ATTACK:enterprise:S0062 → uses → ATTACK:enterprise:T1082

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c008b7f3-0507-4987-a7e4-8c4d57cb4ca5

DustySky

ATTACK:enterprise:S0062 → uses → ATTACK:enterprise:T1057

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f33725f4-cce5-4868-b494-d73419c76bdf

DustySky · Kaspersky MoleRATs April 2019

ATTACK:enterprise:S0062 → uses → ATTACK:enterprise:T1083

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f9773935-853e-4d5e-9345-9587fd77340d

DustySky · Kaspersky MoleRATs April 2019

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.