S0502Linux
S0502Drovorub
Platforms
1
ATT&CK
14.1
References
2
Description
[Drovorub](https://attack.mitre.org/software/S0502) is a Linux malware toolset comprised of an agent, client, server, and kernel modules, that has been used by [APT28](https://attack.mitre.org/groups/G0007).(Citation: NSA/FBI Drovorub August 2020)
Documented platforms: Linux. Attributed to ATT&CK group: APT28. Catalogued in ATT&CK 14.1. 2 references curated.
Platforms· 1
Linux
Attributed to1
| Type | Target | Confidence | Tier |
|---|---|---|---|
| Group | APT28g0007 | 95% | live |
References
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.