SubzeroMalware
- corelump
- jumplump
Last reported 3 years ago, by Elastic Security Labs1 report
ATT&CK techniques
2 techniques · each with the sentence it comes from- T1059.005Visual Basic
“Attempts to use a Visual Basic for Applications (VBA) script for initial execution generates a Memory Threat Prevention Alert: Shellcode Injection event.”
- T1546.015Component Object Model Hijacking
“Component Object Model Hijacking”
What the reports say
1 report, newest first · the exact sentence from each-
KNOTWEED Assessment Summary“DSIRF has been linked to the sale of a malicious toolset (among others) called Subzero which has been observed being deployed through the use of 0-day exploits targeting Adobe and the Windows operating system.”
Thanks — we review every report.