S1017Windows
S1017OutSteel
Platforms
1
ATT&CK
14.1
References
2
Description
[OutSteel](https://attack.mitre.org/software/S1017) is a file uploader and document stealer developed with the scripting language AutoIT that has been used by [Ember Bear](https://attack.mitre.org/groups/G1003) since at least March 2021.(Citation: Palo Alto Unit 42 OutSteel SaintBot February 2022 )
Documented platforms: Windows. Attributed to ATT&CK group: Ember Bear. Catalogued in ATT&CK 14.1. 2 references curated.
Platforms· 1
Windows
Attributed to1
| Type | Target | Confidence | Tier |
|---|---|---|---|
| Group | Ember Bearg1003 | 100% | live |
References
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.