Latrodectus
Software · ATTACK:enterprise:S1160
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S1160",
"title": "Latrodectus",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S1160",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--76fde8df-3495-47c9-82eb-125c4f7fb621",
"external_id": "S1160",
"domain": "enterprise",
"created": "2024-09-16T18:47:30.547Z",
"modified": "2024-09-30T17:59:30.330Z",
"version": "1.0",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "IceNova"
},
{
"source_name": "Unidentified 111"
},
{
"source_name": "Bleeping Computer Latrodectus April 2024",
"url": "https://www.bleepingcomputer.com/news/security/new-latrodectus-malware-attacks-use-microsoft-cloudflare-themes/"
},
{
"source_name": "Bitsight Latrodectus June 2024",
"url": "https://www.bitsight.com/blog/latrodectus-are-you-coming-back"
},
{
"source_name": "Latrodectus APR 2024",
"url": "https://www.proofpoint.com/us/blog/threat-insight/latrodectus-spider-bytes-ice"
}
]
}Explicit source assertions (45)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1102
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0435981c-4e1c-483f-8eb0-6586179e9c23
Palo Alto Latrodectus Activity June 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1218.011
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0f2bab58-fd7c-486a-b2b7-48eeb39bf212
Bleeping Computer Latrodectus April 2024 · Elastic Latrodectus May 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1132.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--14bcff67-6ecb-4a0a-9fcf-5b5ea72a6f06
Latrodectus APR 2024 · Elastic Latrodectus May 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1059.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1b5bac20-4c29-42a5-86ce-622c1d50cf6b
Bitsight Latrodectus June 2024 · Elastic Latrodectus May 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1016
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1cc9d9cb-1671-44a3-916c-bf191490946c
Bitsight Latrodectus June 2024 · Elastic Latrodectus May 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1218.007
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1dd52d2b-6245-4620-aabf-161ed260965a
Bleeping Computer Latrodectus April 2024 · Latrodectus APR 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1135
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--20d2449b-aa52-40bc-8a7a-5c6f72eb3ce0
Bitsight Latrodectus June 2024 · Elastic Latrodectus May 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1057
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--22926f48-80d0-4ce1-8ee0-41a8930b34ef
Bitsight Latrodectus June 2024 · Latrodectus APR 2024 · Elastic Latrodectus May 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1033
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2fd0ebb0-6086-441d-b83c-e73e3f8ed69a
Elastic Latrodectus May 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1053.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--35437cd0-280a-407d-9f3a-36dc61deba1a
Bitsight Latrodectus June 2024 · Latrodectus APR 2024 · Elastic Latrodectus May 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1204.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3ff580a6-1323-4587-8f64-137e02f148e6
Bleeping Computer Latrodectus April 2024 · Latrodectus APR 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1027.007
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--44d369b8-7e27-4197-8ba7-6153f3abbf35
Latrodectus APR 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--46536757-5c5b-4927-9f68-b12ebef13568
Bitsight Latrodectus June 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1566.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--550096e6-6ed2-41de-8cfc-3a59da54bf68
Bleeping Computer Latrodectus April 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1140
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5a56f203-5537-4dd1-a08d-db4526bf75bd
Bitsight Latrodectus June 2024 · Latrodectus APR 2024 · Elastic Latrodectus May 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1070.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5bd21716-220c-4135-b7f5-3f6fb2c11ccb
Bitsight Latrodectus June 2024 · Elastic Latrodectus May 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1083
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5c15936e-ed4a-4a6e-a126-eb36084019b5
Bitsight Latrodectus June 2024 · Latrodectus APR 2024 · Elastic Latrodectus May 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1559.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5cdc3bec-bc58-4e23-97a1-cde538035a35
Bitsight Latrodectus June 2024 · Elastic Latrodectus May 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1027.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6801470e-9db4-4900-9bf0-aaef2774cdd3
Elastic Latrodectus May 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1059.007
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6d5e93c2-073a-4974-a25f-c5a805780a45
Bitsight Latrodectus June 2024 · Elastic Latrodectus May 2024 · Palo Alto Latrodectus Activity June 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--70d06758-46ce-47b9-a3af-ff341d210a4a
Bitsight Latrodectus June 2024 · Latrodectus APR 2024 · Elastic Latrodectus May 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1071.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--78cd9016-aab5-4356-ae15-b3d38b7491fb
Bitsight Latrodectus June 2024 · Latrodectus APR 2024 · Elastic Latrodectus May 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1041
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--84afb7d8-4b2f-4995-a14c-a24b45d314fc
Bitsight Latrodectus June 2024 · Latrodectus APR 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1036.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8ac5b693-ed9b-483e-9f7c-7cd1357e3499
Elastic Latrodectus May 2024ATTACK:enterprise:G1037 → uses → ATTACK:enterprise:S1160
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8c56c995-3538-46bc-a05e-b0cffda55198
Latrodectus APR 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1106
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--948eb193-9037-43cf-99db-5d7912277ed0
Bitsight Latrodectus June 2024 · Elastic Latrodectus May 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1204.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9beeef27-988c-4ec3-ab34-d452d4dd6a76
Bleeping Computer Latrodectus April 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1104
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a05c9888-4d88-4487-8e48-b0509de3fb50
Latrodectus APR 2024ATTACK:enterprise:G1038 → uses → ATTACK:enterprise:S1160
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a3f0a84b-e32a-46d3-8ada-189f2d8796c8
Bitsight Latrodectus June 2024 · Latrodectus APR 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1482
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a7d74cbe-ff0d-428c-8869-148f6bab807b
Bitsight Latrodectus June 2024 · Elastic Latrodectus May 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1027.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a89ce82a-b4f6-4055-bed3-16c2eeb984a5
Elastic Latrodectus May 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1529
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--aba4a71f-ddee-428b-a454-9842fd8750fd
Elastic Latrodectus May 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1082
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ac4b5156-e98e-4826-abc5-02e244496c03
Bitsight Latrodectus June 2024 · Latrodectus APR 2024 · Elastic Latrodectus May 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1518.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ae8ac860-1dfc-41c3-81ab-08da9619c4a3
Bitsight Latrodectus June 2024 · Elastic Latrodectus May 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1573.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--be2d7f8b-8e7d-45ac-b855-385bc1e03b7e
Bitsight Latrodectus June 2024 · Latrodectus APR 2024 · Elastic Latrodectus May 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1564.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c18285a0-8c55-4aee-bb60-55b359cdfacb
Elastic Latrodectus May 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1069.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c915bb8a-631a-47b9-9b97-c43939b17661
Bitsight Latrodectus June 2024 · Elastic Latrodectus May 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1027.013
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d2aa6fd1-d530-4fbf-ada7-8b3ddb149d7e
Bitsight Latrodectus June 2024 · Latrodectus APR 2024 · Elastic Latrodectus May 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1547.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d7f1b78b-824d-4ddc-a4cc-3fd44d07c4d3
Latrodectus APR 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1497.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d80dc743-4799-4497-8708-b1324b38e3e1
Bitsight Latrodectus June 2024 · Latrodectus APR 2024 · Elastic Latrodectus May 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1566.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d9a681a0-bf13-40b2-9534-f244d48d3a92
Bleeping Computer Latrodectus April 2024 · Latrodectus APR 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1047
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e7995f43-d3f1-4ad2-b3bd-fc835faa3333
Bitsight Latrodectus June 2024 · Elastic Latrodectus May 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1622
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ebb04a61-225d-4cd3-b589-b3001069566e
Latrodectus APR 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1087.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f451a96a-9266-4252-bd1f-d61c12691708
Elastic Latrodectus May 2024ATTACK:enterprise:S1160 → uses → ATTACK:enterprise:T1021.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--fb699407-1269-407a-845d-7085a7ae836d
Palo Alto Latrodectus Activity June 2024