Skip to content

H1N1

Software · ATTACK:enterprise:S0132

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance

{
  "id": "ATTACK:enterprise:S0132",
  "title": "H1N1",
  "type": "Software",
  "source_url": "https://attack.mitre.org/software/S0132",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "malware--f8dfbc54-b070-4224-b560-79aaa5f835bd",
  "external_id": "S0132",
  "domain": "enterprise",
  "created": "2017-05-31T21:33:15.910Z",
  "modified": "2026-05-12T15:12:00.740Z",
  "version": "1.2",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "Cisco H1N1 Part 1",
      "url": "http://blogs.cisco.com/security/h1n1-technical-analysis-reveals-new-capabilities"
    }
  ]
}

Explicit source assertions (13)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:S0132 → uses → ATTACK:enterprise:T1555.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0d4e8cb8-c265-449a-b010-f4614135572f

Cisco H1N1 Part 2

ATTACK:enterprise:S0132 → uses → ATTACK:enterprise:T1080

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1539eaf6-e4ea-4e9d-af2b-2594d1ca5b38

Cisco H1N1 Part 2

ATTACK:enterprise:S0132 → uses → ATTACK:enterprise:T1490

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2d090e9d-f9fb-4f73-99df-0e17a7489adb

Cisco H1N1 Part 2

ATTACK:enterprise:S0132 → uses → ATTACK:enterprise:T1027

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4527c528-8377-4349-ae5c-95c04cabd3d4

Cisco H1N1 Part 1

ATTACK:enterprise:S0132 → uses → ATTACK:enterprise:T1059.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4a419b18-5fb2-43a0-8c0a-6521b8d9de63

Cisco H1N1 Part 2

ATTACK:enterprise:S0132 → uses → ATTACK:enterprise:T1091

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5b2682dc-f64d-482b-8fc4-132dad2727d9

Cisco H1N1 Part 2

ATTACK:enterprise:S0132 → uses → ATTACK:enterprise:T1686.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7b74386d-5f8f-4b07-9c8c-f4cb7b08637e

Cisco H1N1 Part 2

ATTACK:enterprise:S0132 → uses → ATTACK:enterprise:T1548.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8961d93e-ec51-42dd-8f76-54d46ea21967

Cisco H1N1 Part 2

ATTACK:enterprise:S0132 → uses → ATTACK:enterprise:T1027.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--98aeed7c-e88b-4c5b-8e8e-21ee3534abe9

Cisco H1N1 Part 1

ATTACK:enterprise:S0132 → uses → ATTACK:enterprise:T1105

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a7e5ffbc-d123-4f62-88eb-36b32656cd35

Cisco H1N1 Part 2

ATTACK:enterprise:S0132 → uses → ATTACK:enterprise:T1132

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c79d7110-46bb-4b6d-a256-87bd1b6379a3

Cisco H1N1 Part 2

ATTACK:enterprise:S0132 → uses → ATTACK:enterprise:T1573.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ca8ed9e2-f7a6-4d54-b450-94c187b1f9b6

Cisco H1N1 Part 2

ATTACK:enterprise:S0132 → uses → ATTACK:enterprise:T1685

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--cd217830-522c-4be3-9179-c6e28cfac122

Cisco H1N1 Part 2

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.