S0678Windows

S0678Torisma

Platforms
1
ATT&CK
14.1
References
2

Description

[Torisma](https://attack.mitre.org/software/S0678) is a second stage implant designed for specialized monitoring that has been used by [Lazarus Group](https://attack.mitre.org/groups/G0032). [Torisma](https://attack.mitre.org/software/S0678) was discovered during an investigation into the 2020 Operation North Star campaign that targeted the defense sector.(Citation: McAfee Lazarus Nov 2020)

Platforms· 1

Windows

Attributed to1

TypeTargetConfidenceTier
GroupLazarus Groupg0032100%live

References

  1. https://attack.mitre.org/software/S0678
  2. https://www.mcafee.com/blogs/other-blogs/mcafee-labs/operation-north-star-behind-the-scenes/

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Software
Tomiris
Software
DRATzarus
Software
Lizar
Actor
Storm-0473
Software
Bankshot
Software
Turian
Sourced from MITRE ATT&CK Enterprise 14.1. Curated by Adam Lundqvist, SQUR.