Megazord
Software · ATTACK:enterprise:S1191
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S1191",
"title": "Megazord",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S1191",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--4e762e29-3c56-4a2b-b205-c5890c0856ed",
"external_id": "S1191",
"domain": "enterprise",
"created": "2025-01-08T21:31:29.913Z",
"modified": "2025-03-11T15:37:31.186Z",
"version": "1.0",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "CISA Akira Ransomware APR 2024",
"url": "https://www.cisa.gov/sites/default/files/2024-04/aa24-109a-stopransomware-akira-ransomware_2.pdf"
},
{
"source_name": "Cisco Akira Ransomware OCT 2024",
"url": "https://blog.talosintelligence.com/akira-ransomware-continues-to-evolve/"
},
{
"source_name": "Palo Alto Howling Scorpius DEC 2024",
"url": "https://unit42.paloaltonetworks.com/threat-assessment-howling-scorpius-akira-ransomware/"
}
]
}Explicit source assertions (7)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S1191 → uses → ATTACK:enterprise:T1059.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1831125c-e713-4fdb-a893-1284b2acffc0
Palo Alto Howling Scorpius DEC 2024ATTACK:enterprise:S1191 → uses → ATTACK:enterprise:T1489
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--457340c8-e8d9-49e3-810b-cbd58c6d6212
Palo Alto Howling Scorpius DEC 2024ATTACK:enterprise:S1191 → uses → ATTACK:enterprise:T1654
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9a3ce7a9-f3b9-4387-bd7e-a1cf1b8c8f67
Palo Alto Howling Scorpius DEC 2024ATTACK:enterprise:S1191 → uses → ATTACK:enterprise:T1057
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b418e034-9fdd-4238-8c6a-3ad7bf249ead
Palo Alto Howling Scorpius DEC 2024ATTACK:enterprise:G1024 → uses → ATTACK:enterprise:S1191
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c685df5b-8916-41f0-9558-eed76b445a8d
CISA Akira Ransomware APR 2024 · Cisco Akira Ransomware OCT 2024 · Palo Alto Howling Scorpius DEC 2024ATTACK:enterprise:S1191 → uses → ATTACK:enterprise:T1486
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ea9e76d8-7f14-445d-9d3d-835238d727f8
CISA Akira Ransomware APR 2024 · Cisco Akira Ransomware OCT 2024 · Palo Alto Howling Scorpius DEC 2024ATTACK:enterprise:S1191 → uses → ATTACK:enterprise:T1083
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f4a42928-1bf7-4177-b798-1fd254acc522
Palo Alto Howling Scorpius DEC 2024