S0112Windows

S0112ROCKBOOT

Platforms
1
ATT&CK
14.1
References
2

Description

[ROCKBOOT](https://attack.mitre.org/software/S0112) is a [Bootkit](https://attack.mitre.org/techniques/T1542/003) that has been used by an unidentified, suspected China-based group. (Citation: FireEye Bootkits) Documented platforms: Windows. Catalogued in ATT&CK 14.1. 2 references curated. Documented platforms: Windows. Catalogued in ATT&CK 14.1. 2 references curated.

Platforms· 1

Windows

References

  1. https://attack.mitre.org/software/S0112
  2. https://www.fireeye.com/blog/threat-research/2015/12/fin1-targets-boot-record.html

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Software
BOOTRASH
Group
Rocke
Software
ZxShell
Software
Taidoor
Software
RIPTIDE
Software
PS1
Sourced from MITRE ATT&CK Enterprise 14.1. Curated by Adam Lundqvist, SQUR.