TAINTEDSCRIBE
Software · ATTACK:enterprise:S0586
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S0586",
"title": "TAINTEDSCRIBE",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0586",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--7f4bbe05-1674-4087-8a16-8f1ad61b6152",
"external_id": "S0586",
"domain": "enterprise",
"created": "2021-03-05T15:56:44.479Z",
"modified": "2025-04-25T14:43:52.174Z",
"version": "1.0",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "CISA MAR-10288834-2.v1 TAINTEDSCRIBE MAY 2020",
"url": "https://us-cert.cisa.gov/ncas/analysis-reports/ar20-133b"
}
]
}Explicit source assertions (17)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S0586 → uses → ATTACK:enterprise:T1018
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--07324f90-f7c1-41f7-8d08-3ecec98bbe5c
CISA MAR-10288834-2.v1 TAINTEDSCRIBE MAY 2020ATTACK:enterprise:S0586 → uses → ATTACK:enterprise:T1027.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0a4e5f93-6efa-4490-b7fb-21a47a15612b
CISA MAR-10288834-2.v1 TAINTEDSCRIBE MAY 2020ATTACK:enterprise:S0586 → uses → ATTACK:enterprise:T1070.006
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0d4d42e9-0473-42fc-b018-c79b54c7a87f
CISA MAR-10288834-2.v1 TAINTEDSCRIBE MAY 2020ATTACK:enterprise:S0586 → uses → ATTACK:enterprise:T1083
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1039ed0e-216f-4eef-9a7e-c4eaa3ca0152
CISA MAR-10288834-2.v1 TAINTEDSCRIBE MAY 2020ATTACK:enterprise:S0586 → uses → ATTACK:enterprise:T1560
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1f066ba6-31e2-48d1-a7ac-27a20879287b
CISA MAR-10288834-2.v1 TAINTEDSCRIBE MAY 2020ATTACK:enterprise:S0586 → uses → ATTACK:enterprise:T1057
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--40ab538b-9386-4559-8861-098503d3770f
CISA MAR-10288834-2.v1 TAINTEDSCRIBE MAY 2020ATTACK:enterprise:S0586 → uses → ATTACK:enterprise:T1036.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--79d85e89-658e-4a38-b406-624fbe13ce9e
CISA MAR-10288834-2.v1 TAINTEDSCRIBE MAY 2020ATTACK:enterprise:S0586 → uses → ATTACK:enterprise:T1547.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7d667946-e6f1-418b-9ad3-0e3689dfaaa7
CISA MAR-10288834-2.v1 TAINTEDSCRIBE MAY 2020ATTACK:enterprise:G0032 → uses → ATTACK:enterprise:S0586
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--83e8bdc8-6fad-4b83-92de-2b66e3e9205e
CISA MAR-10288834-2.v1 TAINTEDSCRIBE MAY 2020ATTACK:enterprise:S0586 → uses → ATTACK:enterprise:T1059.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--86c734dd-d40c-42ec-b074-0f7a4f2b55cf
CISA MAR-10288834-2.v1 TAINTEDSCRIBE MAY 2020ATTACK:enterprise:S0586 → uses → ATTACK:enterprise:T1573.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8d12dc63-d18a-43ef-b4bb-f4e9f67d2251
CISA MAR-10288834-2.v1 TAINTEDSCRIBE MAY 2020ATTACK:enterprise:S0586 → uses → ATTACK:enterprise:T1001.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8da08b47-36bd-4d74-91df-6fdae6d1bfff
CISA MAR-10288834-2.v1 TAINTEDSCRIBE MAY 2020ATTACK:enterprise:S0586 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--98557068-7d60-40d4-8294-01469aadf6fe
CISA MAR-10288834-2.v1 TAINTEDSCRIBE MAY 2020ATTACK:enterprise:S0586 → uses → ATTACK:enterprise:T1124
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--bff9fc96-0b27-4c84-ad42-dcea53b907bf
CISA MAR-10288834-2.v1 TAINTEDSCRIBE MAY 2020ATTACK:enterprise:S0586 → uses → ATTACK:enterprise:T1008
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d2d98eeb-4ebd-4db5-adf8-2a737306b17f
CISA MAR-10288834-2.v1 TAINTEDSCRIBE MAY 2020ATTACK:enterprise:S0586 → uses → ATTACK:enterprise:T1070.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d3366503-cb6e-4fd3-9d93-ae9ee2faa0d4
CISA MAR-10288834-2.v1 TAINTEDSCRIBE MAY 2020ATTACK:enterprise:S0586 → uses → ATTACK:enterprise:T1680
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e1eebea8-ad12-4c3f-bbdc-10f26bbccda8
CISA MAR-10288834-2.v1 TAINTEDSCRIBE MAY 2020