FoggyWeb
Software · ATTACK:enterprise:S0661
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S0661",
"title": "FoggyWeb",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0661",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--72911fe3-f085-40f7-b4f2-f25a4221fe44",
"external_id": "S0661",
"domain": "enterprise",
"created": "2021-11-16T14:33:46.321Z",
"modified": "2024-04-11T02:32:04.884Z",
"version": "1.1",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "MSTIC FoggyWeb September 2021",
"url": "https://www.microsoft.com/security/blog/2021/09/27/foggyweb-targeted-nobelium-malware-leads-to-persistent-backdoor/"
}
]
}Explicit source assertions (22)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S0661 → uses → ATTACK:enterprise:T1140
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--23679538-e90c-430d-b375-6d8bbf8ec723
MSTIC FoggyWeb September 2021ATTACK:enterprise:S0661 → uses → ATTACK:enterprise:T1560.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2a9fde8d-dbec-42e9-ad73-02f80e765a91
MSTIC FoggyWeb September 2021ATTACK:enterprise:S0661 → uses → ATTACK:enterprise:T1041
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2c93a27a-c6f0-46b9-857b-b746e2204670
MSTIC FoggyWeb September 2021ATTACK:enterprise:S0661 → uses → ATTACK:enterprise:T1027.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--40a32109-3cae-4f00-ac82-d8da57ce0eeb
MSTIC FoggyWeb September 2021ATTACK:enterprise:G0016 → uses → ATTACK:enterprise:S0661
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--517735b6-69f4-4188-8fef-45981220e4bc
MSTIC FoggyWeb September 2021ATTACK:enterprise:S0661 → uses → ATTACK:enterprise:T1005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--52e9ca8d-a778-46d1-9521-743a8e47c503
MSTIC FoggyWeb September 2021ATTACK:enterprise:S0661 → uses → ATTACK:enterprise:T1027.013
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--594a13ec-9187-4410-95a2-99684183200f
MSTIC FoggyWeb September 2021ATTACK:enterprise:S0661 → uses → ATTACK:enterprise:T1071.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5c92055a-8396-4e60-9e1f-c95a028b902b
MSTIC FoggyWeb September 2021ATTACK:enterprise:S0661 → uses → ATTACK:enterprise:T1552.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6b2e4ea0-1d04-4cf5-8ca8-72b311e20737
MSTIC FoggyWeb September 2021ATTACK:enterprise:S0661 → uses → ATTACK:enterprise:T1036
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6c0510e4-a642-4dfe-9632-dff6f97e09de
MSTIC FoggyWeb September 2021ATTACK:enterprise:S0661 → uses → ATTACK:enterprise:T1057
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6d91c756-df9c-4fbe-9489-2cf6cf7ba206
MSTIC FoggyWeb September 2021ATTACK:enterprise:S0661 → uses → ATTACK:enterprise:T1550
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6ee04a90-7158-43a6-8133-9b498f1fef2c
MSTIC FoggyWeb September 2021ATTACK:enterprise:S0661 → uses → ATTACK:enterprise:T1106
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--85425f5c-a65e-43fe-8c69-594425b6608f
MSTIC FoggyWeb September 2021ATTACK:enterprise:S0661 → uses → ATTACK:enterprise:T1129
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--91d0f880-8928-4173-bb2f-518876a8c0b3
MSTIC FoggyWeb September 2021ATTACK:enterprise:S0661 → uses → ATTACK:enterprise:T1040
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--98b8b974-ac4f-4286-b657-f34f813c1d12
MSTIC FoggyWeb September 2021ATTACK:enterprise:S0661 → uses → ATTACK:enterprise:T1560.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--990e64f6-6a47-410c-9557-a17e96a60755
MSTIC FoggyWeb September 2021ATTACK:enterprise:S0661 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--998c449f-ef46-4f42-a6a4-bd025338584e
MSTIC FoggyWeb September 2021ATTACK:enterprise:S0661 → uses → ATTACK:enterprise:T1574.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9d7577f9-2003-4cbc-b7cb-58f2dc20714c
MSTIC FoggyWeb September 2021ATTACK:enterprise:S0661 → uses → ATTACK:enterprise:T1036.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a0a166b9-3aec-4dbe-b786-23f6439943eb
MSTIC FoggyWeb September 2021ATTACK:enterprise:S0661 → uses → ATTACK:enterprise:T1083
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b3c50e22-4f4c-490c-9284-0af1c0543821
MSTIC FoggyWeb September 2021ATTACK:enterprise:S0661 → uses → ATTACK:enterprise:T1620
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--dbeb509e-58a9-41f9-bd08-95b3b1075edf
MSTIC FoggyWeb September 2021ATTACK:enterprise:S0661 → uses → ATTACK:enterprise:T1573.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e1e07e90-7012-4a38-82b4-e521ef21e8d9
MSTIC FoggyWeb September 2021