S0260Windows

S0260InvisiMole

Platforms
1
ATT&CK
14.1
References
3

Description

[InvisiMole](https://attack.mitre.org/software/S0260) is a modular spyware program that has been used by the InvisiMole Group since at least 2013. [InvisiMole](https://attack.mitre.org/software/S0260) has two backdoor modules called RC2FM and RC2CL that are used to perform post-exploitation activities. It has been discovered on compromised victims in the Ukraine and Russia. [Gamaredon Group](https://attack.mitre.org/groups/G0047) infrastructure has been used to download and execute [InvisiMole](https://attack.mitre.org/software/S0260) against a small number of victims.(Citation: ESET InvisiMole June 2018)(Citation: ESET InvisiMole June 2020)

Platforms· 1

Windows

Attributed to1

TypeTargetConfidenceTier
GroupGamaredon Groupg0047100%live

References

  1. https://attack.mitre.org/software/S0260
  2. https://www.welivesecurity.com/2018/06/07/invisimole-equipped-spyware-undercover/
  3. https://www.welivesecurity.com/wp-content/uploads/2020/06/ESET_InvisiMole.pdf

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Software
QuietSieve
Software
InnaputRAT
Software
Uroburos
Software
Gelsemium
Software
EVILNUM
Software
TrickBot
Sourced from MITRE ATT&CK Enterprise 14.1. Curated by Adam Lundqvist, SQUR.