Octo Tempest crosses boundaries to facilitate extortion, encryption, and destruction | Microsoft Security Blog
Tags
cmtmf-attack-pattern: Masquerading
maec-delivery-vectors: Watering Hole
attack-pattern: Data Model Models Adversary-In-The-Middle - T1638 Adversary-In-The-Middle - T1557 Code Repositories - T1213.003 Code Repositories - T1593.003 Conditional Access Policies - T1556.009 Credentials - T1589.001 Dcsync - T1003.006 Dns - T1071.004 Dns - T1590.002 Domains - T1583.001 Domains - T1584.001 Malware - T1587.001 Malware - T1588.001 Masquerading - T1655 Multi-Factor Authentication - T1556.006 Ntds - T1003.003 Phishing - T1660 Phishing - T1566 Python - T1059.006 Server - T1583.004 Server - T1584.004 Sharepoint - T1213.002 Social Media - T1593.001 Software - T1592.002 Trust Modification - T1484.002 Tool - T1588.002 Account Manipulation - T1098 Connection Proxy - T1090 Hypervisor - T1062 Masquerading - T1036 Masquerading
Show in Graph
Common Information
Type Value
UUID fc6322b6-6497-4f40-ac9f-11ad4a6dcd9e
Fingerprint b5511a911b44cec9
Analysis status DONE
Considered CTI value 1
Text language
Published Oct. 25, 2023, 9:30 a.m.
Added to db Nov. 19, 2023, 12:41 a.m.
Last updated Nov. 17, 2024, 6:53 p.m.
Headline Octo Tempest crosses boundaries to facilitate extortion, encryption, and destruction
Title Octo Tempest crosses boundaries to facilitate extortion, encryption, and destruction | Microsoft Security Blog
Detected Hints/Tags/Attributes 144/3/11
Source URLs
Redirection Url
Details Source https://www.microsoft.com/en-us/security/blog/2023/10/25/octo-tempest-crosses-boundaries-to-facilitate-extortion-encryption-and-destruction/
URL Provider
Details Provider Source level domain
Details microsoft.com www.microsoft.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 173 ✔ Microsoft Security Blog https://microsoft.com/security/blog/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 2 
privacy.sexy
Details Domain 26 
gofile.io
Details Domain 2 
shz.al
Details Domain 32 
temp.sh
Details Domain 45 
paste.ee
Details Domain 107 
aka.ms
Details Domain 1373 
twitter.com
Details Mandiant Temporary Group Assumption 18 
TEMP.SH
Details Mandiant Uncategorized Groups 111 
UNC3944
Details Url 22 
https://aka.ms/threatintelblog.
Details Url 15 
https://twitter.com/msftsecintel.