S0181Windows

S0181FALLCHILL

Platforms
1
ATT&CK
14.1
References
2

Description

[FALLCHILL](https://attack.mitre.org/software/S0181) is a RAT that has been used by [Lazarus Group](https://attack.mitre.org/groups/G0032) since at least 2016 to target the aerospace, telecommunications, and finance industries. It is usually dropped by other [Lazarus Group](https://attack.mitre.org/groups/G0032) malware or delivered when a victim unknowingly visits a compromised website. (Citation: US-CERT FALLCHILL Nov 2017)

Platforms· 1

Windows

References

  1. https://attack.mitre.org/software/S0181
  2. https://www.us-cert.gov/ncas/alerts/TA17-318A

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Software
DRATzarus
Software
Winnti for Windows
Software
AppleJeus
Software
Bankshot
Software
RATANKBA
Software
gh0st RAT
Sourced from MITRE ATT&CK Enterprise 14.1. Curated by Adam Lundqvist, SQUR.