aol.pm

Loss of Productivity and Revenue

Technique · ATTACK:ics:T0828

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:ics:T0828",
  "title": "Loss of Productivity and Revenue",
  "type": "Technique",
  "source_url": "https://attack.mitre.org/techniques/T0828",
  "snapshot": "ics-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "attack-pattern--63b6942d-8359-4506-bfb3-cf87aa8120ee",
  "external_id": "T0828",
  "domain": "ics",
  "created": "2020-05-21T17:43:26.506Z",
  "modified": "2025-04-16T21:26:15.157Z",
  "version": "1.0",
  "aliases": [

  ],
  "tactics": [
    "impact"
  ],
  "source_references": [
    {
      "source_name": "Colonial Pipeline Company May 2021",
      "url": "https://www.colpipe.com/news/press-releases/media-statement-colonial-pipeline-system-disruption"
    },
    {
      "source_name": "Lion Corporation June 2020",
      "url": "https://lionco.com/2020/06/26/lion-update-re-cyber-issue/"
    },
    {
      "source_name": "Paganini, Pierluigi June 2020",
      "url": "https://securityaffairs.co/wordpress/104749/cyber-crime/ransomware-attack-hit-lion.html"
    }
  ]
}

Explicit source assertions (11)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:ics:S0446 → uses → ATTACK:ics:T0828

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--383e242a-72d4-4b40-8905-888595c34919

Kelly Jackson Higgins

ATTACK:ics:C0028 → uses → ATTACK:ics:T0828

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--423271c0-04dc-42d0-8e27-fb0b6067e096

Booz Allen Hamilton · Ukraine15 - EISAC - 201603

ATTACK:ics:S0372 → uses → ATTACK:ics:T0828

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--46bc86e4-e20b-4778-80d2-8891039e6fb4

Hydro · Kevin Beaumont

ATTACK:ics:S0608 → uses → ATTACK:ics:T0828

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--51f9963c-c041-4bec-b482-5fda2fb5bca4

Catalin Cimpanu April 2016

ATTACK:ics:C0030 → uses → ATTACK:ics:T0828

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5beda54d-cd1f-491b-a85e-d7618a0683ad

FireEye TRITON Dec 2017

ATTACK:ics:S0368 → uses → ATTACK:ics:T0828

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7258c355-677c-452d-b1fc-27767232437b

David Voreacos, Katherine Chinglinsky, Riley Griffin December 2019

ATTACK:ics:S0605 → uses → ATTACK:ics:T0828

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a6519c11-e9d4-4b6f-8d92-8efaa2144c28

Davey Winder June 2020

ATTACK:ics:S0496 → uses → ATTACK:ics:T0828

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ab306654-2abb-4983-8d30-df4058adb06c

Selena Larson, Camille Singleton December 2020

ATTACK:ics:C0031 → uses → ATTACK:ics:T0828

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d67ae959-9014-4501-b963-42bee03a5e3b

Jamie Tarabay and Katrina Manson December 2023

ATTACK:ics:S0606 → uses → ATTACK:ics:T0828

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d7ea83fa-87c7-4d36-96d5-aee554504040

ESET Bad Rabbit

ATTACK:ics:M0953 → mitigates → ATTACK:ics:T0828

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--dda89758-9d0b-446d-b594-85acc7f9cb90

Department of Homeland Security October 2009

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.