S0586TAINTEDSCRIBE

[TAINTEDSCRIBE](https://attack.mitre.org/software/S0586) is a fully-featured beaconing implant integrated with command modules used by [Lazarus Group](https://attack.mitre.org/groups/G0032). It was first reported in May 2020.(Citation: CISA MAR-10288834-2.v1 TAINTEDSCRIBE MAY 2020) Documented platforms: Windows. Attributed to ATT&CK group: Lazarus Group. Catalogued in ATT&CK 14.1. 2 references curated.