216.73.217.22

T1547.011: T1547.011

View on MITRE ATT&CK AlienVault · Published 19/02/2026 19:13 · Modified 19/02/2026 19:13

Essential information

MITRE technique ID
T1547.011
Confidence
100/100
Revoked
No
Published
19/02/2026 19:13
Modified
19/02/2026 19:13
Author / Source
AlienVault

Description

No description.

Marking (TLP)

TLP:CLEAR

External references

Related entities

Intrusion sets, malware, reports, vulnerabilities, indicators and other entities linked to this technique.

Intrusion sets (APT) (1)

  • STARDUST CHOLLIMA uses NICKEL GLADSTONEBeagleBoyz
    The MITRE Corporation Confidence 100

    [APT38](https://attack.mitre.org/groups/G0082) is a North Korean state-sponsored threat group that specializes in financial cyber operations; it has been attributed to the Reconnaissance General Bureau.(Citation: CISA AA20-239A BeagleBoyz August 2020) …

    First seen 01/01/1970 · Last seen 16/11/5138 Published 16/12/2025 19:39 · Modified 04/05/2026 16:33

Malware (7)

  • icloudz uses
    Family
    Published 17/04/2026 08:37 · Modified 17/04/2026 08:37
  • services uses
    Family
    Published 17/04/2026 08:37 · Modified 17/04/2026 08:37
  • Cuckoo Stealer uses
    Family
    Published 19/02/2026 15:26 · Modified 19/02/2026 15:26
  • com.apple.cli uses
    Family
    Published 17/04/2026 08:37 · Modified 17/04/2026 08:37
  • softwareupdate.app uses
    Family
    Published 17/04/2026 08:37 · Modified 17/04/2026 08:37
  • com.google.chromes.updaters uses
    Family
    Published 17/04/2026 08:37 · Modified 17/04/2026 08:37
  • systemupdate.app uses
    Family
    Published 17/04/2026 08:37 · Modified 17/04/2026 08:37

Reports (2)

Vulnerabilities (CVE) (1)

CVE-2026-25253
8.8 High

OpenClaw (aka clawdbot or Moltbot) before 2026.1.29 obtains a gatewayUrl value from a query string and automatically makes a WebSocket connection without …

Published
01/02/2026
Modified
02/02/2026
Received