ATT&CK version 12.1
Techniques
Enterprise
Technique Changes
- Adversary-in-the-Middle: LLMNR/NBT-NS Poisoning and SMB Relay (v1.3→v1.4)
- Establish Accounts: Cloud Accounts (v1.0→v1.1)
Minor Technique Changes
- Multi-Factor Authentication Interception (v2.0→v2.0)
- Search Open Websites/Domains: Code Repositories (v1.0→v1.0)
- Stage Capabilities: SEO Poisoning (v1.0→v1.0)
Software
Enterprise
Minor Software Changes
- DCSrv (v1.0→v1.0)
- Heyoka Backdoor (v1.0→v1.0)
- MacMa (v1.0→v1.0)
- Mongall (v1.0→v1.0)
- PingPull (v1.0→v1.0)
- PsExec (v1.3→v1.3)
- PyDCrypt (v1.0→v1.0)
- WhisperGate (v1.0→v1.0)
Groups
Enterprise
Minor Group Changes
- Aoqin Dragon (v1.0→v1.0)
- EXOTIC LILY (v1.0→v1.0)
- Moses Staff (v1.0→v1.0)
- SideCopy (v1.0→v1.0)
Data Sources and/or Components
Enterprise
Data Source and/or Component Deprecations
- Container: Container Metadata (v1.0)
- Pod: Pod Metadata (v1.0)
Contributors to this release
- Manikantan Srinivasan, NEC Corporation India
- Phill Taylor, BT Security
- Vinayak Wadhwa, SAFE Security
- Will Jolliffe