Skip to content

StrongPity

Software · ATTACK:enterprise:S0491

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance

{
  "id": "ATTACK:enterprise:S0491",
  "title": "StrongPity",
  "type": "Software",
  "source_url": "https://attack.mitre.org/software/S0491",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "malware--20945359-3b39-4542-85ef-08ecb4e1c174",
  "external_id": "S0491",
  "domain": "enterprise",
  "created": "2020-07-20T17:41:19.690Z",
  "modified": "2026-09-03T14:50:23.272Z",
  "version": "2.0",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "Talos Promethium June 2020",
      "url": "https://blog.talosintelligence.com/2020/06/promethium-extends-with-strongpity3.html"
    },
    {
      "source_name": "Bitdefender StrongPity June 2020",
      "url": "https://www.bitdefender.com/files/News/CaseStudies/study/353/Bitdefender-Whitepaper-StrongPity-APT.pdf"
    }
  ]
}

Explicit source assertions (28)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:S0491 → uses → ATTACK:enterprise:T1020

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0e3ea008-1a5e-4f58-aaa9-4da690539908

Talos Promethium June 2020 · Bitdefender StrongPity June 2020

ATTACK:enterprise:S0491 → uses → ATTACK:enterprise:T1564.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1248ffe0-ad3b-43a6-a358-763d8eab7fba

Talos Promethium June 2020

ATTACK:enterprise:S0491 → uses → ATTACK:enterprise:T1571

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--18714758-e6ea-4f61-87c9-6340c0001b9c

Bitdefender StrongPity June 2020

ATTACK:enterprise:S0491 → uses → ATTACK:enterprise:T1016

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--35178b99-6830-4150-a094-691888655525

Talos Promethium June 2020

ATTACK:enterprise:S0491 → uses → ATTACK:enterprise:T1041

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--354fe9c0-2b9b-43f9-98a0-ae0ee1515d4d

Talos Promethium June 2020 · Bitdefender StrongPity June 2020

ATTACK:enterprise:S0491 → uses → ATTACK:enterprise:T1560.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--3ad041f8-30ca-44bb-bad5-2e5b3e5d6242

Talos Promethium June 2020 · Bitdefender StrongPity June 2020

ATTACK:enterprise:S0491 → uses → ATTACK:enterprise:T1036.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--580254b6-1227-4c7d-a7b5-c4e7908e0acb

Talos Promethium June 2020 · Bitdefender StrongPity June 2020

ATTACK:enterprise:S0491 → uses → ATTACK:enterprise:T1027.013

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5bddc9b3-eaa0-487b-9d62-25a2a5fbb11a

Talos Promethium June 2020 · Bitdefender StrongPity June 2020

ATTACK:enterprise:S0491 → uses → ATTACK:enterprise:T1204.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--6a552e69-29f1-4acc-8bd2-1f32d7550443

Talos Promethium June 2020 · Bitdefender StrongPity June 2020

ATTACK:enterprise:S0491 → uses → ATTACK:enterprise:T1071.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--6e06ca98-ec9a-4175-a154-4d4f1394774b

Talos Promethium June 2020 · Bitdefender StrongPity June 2020

ATTACK:enterprise:C0033 → uses → ATTACK:enterprise:S0491

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--6e6c72b6-ed92-4574-af75-c5115836e3ec

Talos Promethium June 2020 · Bitdefender StrongPity June 2020

ATTACK:enterprise:S0491 → uses → ATTACK:enterprise:T1070.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7dd11b5f-2f54-43a5-a2e1-9d33e24d89a0

Talos Promethium June 2020 · Bitdefender StrongPity June 2020

ATTACK:enterprise:S0491 → uses → ATTACK:enterprise:T1518.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7e32a557-f724-433f-84e0-756e14db7074

Talos Promethium June 2020

ATTACK:enterprise:S0491 → uses → ATTACK:enterprise:T1083

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8e08658c-78f5-4bd5-a6e8-d74200ed776c

Talos Promethium June 2020

ATTACK:enterprise:S0491 → uses → ATTACK:enterprise:T1119

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8ec92ea1-6021-4e0f-9737-826e9f243830

Bitdefender StrongPity June 2020

ATTACK:enterprise:S0491 → uses → ATTACK:enterprise:T1059.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--93c02dec-e63e-4437-809c-dc99e82d177d

Talos Promethium June 2020

ATTACK:enterprise:S0491 → uses → ATTACK:enterprise:T1543.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9f751d66-0604-4d30-a820-022a8c90e870

Talos Promethium June 2020

ATTACK:enterprise:S0491 → uses → ATTACK:enterprise:T1573.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a624f944-5f3e-4713-9e89-9964ae82c677

Talos Promethium June 2020

ATTACK:enterprise:S0491 → uses → ATTACK:enterprise:T1680

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a6b41bba-0b47-400d-9aa4-134b4f47994f

Talos Promethium June 2020

ATTACK:enterprise:S0491 → uses → ATTACK:enterprise:T1685

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--aaab92fc-4a65-4cea-b1d6-521a4015eb30

Talos Promethium June 2020

ATTACK:enterprise:G0056 → uses → ATTACK:enterprise:S0491

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--bc4252e5-6a2a-443e-9a31-16d86f4f069b

Bitdefender StrongPity June 2020 · Talos Promethium June 2020

ATTACK:enterprise:S0491 → uses → ATTACK:enterprise:T1090.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c1d36d2e-a8ab-4132-8690-e97628a07a0f

Bitdefender StrongPity June 2020

ATTACK:enterprise:S0491 → uses → ATTACK:enterprise:T1105

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c7cf767a-fa78-4ca7-9bd1-612d51d0c098

Bitdefender StrongPity June 2020

ATTACK:enterprise:S0491 → uses → ATTACK:enterprise:T1547.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d5e9478c-439e-4ec5-8317-6d769dedc68a

Talos Promethium June 2020

ATTACK:enterprise:S0491 → uses → ATTACK:enterprise:T1057

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--de0ee6e1-6b97-40be-b036-5339db13e6e4

Talos Promethium June 2020

ATTACK:enterprise:S0491 → uses → ATTACK:enterprise:T1569.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e7b10c00-0860-4592-a72c-e14e993e972b

Talos Promethium June 2020 · Bitdefender StrongPity June 2020

ATTACK:enterprise:S0491 → uses → ATTACK:enterprise:T1553.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e9a0006e-1667-4407-a451-47a4409b90f3

Bitdefender StrongPity June 2020

ATTACK:enterprise:S0491 → uses → ATTACK:enterprise:T1036.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f2502637-0d4a-4b94-928d-1f140f2d0ba1

Talos Promethium June 2020

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.