TA0006: TA0006

Search IOCs, vulnerabilities, APT…

216.73.216.233

← Back to attack patterns

View on MITRE ATT&CK AlienVault · Published 20/12/2025 19:36 · Modified 29/05/2026 12:20

Essential information

MITRE technique ID: TA0006
Confidence: 100/100
Revoked: No
Published: 20/12/2025 19:36
Modified: 29/05/2026 12:20
Author / Source: AlienVault

Description

No description.

Marking (TLP)

TLP:GREEN

External references

mitre-attack (TA0006)

Related entities

Intrusion sets, malware, reports, vulnerabilities, indicators and other entities linked to this technique.

Intrusion sets (APT) (7)

UTA0178 uses

AlienVault Confidence 100

First seen 01/01/1970 · Last seen 16/11/5138 ·
breakcore uses

AlienVault Confidence 100

First seen 01/01/1970 · Last seen 16/11/5138 ·
CozyDuke uses IRON RITUALIRON HEMLOCK

The MITRE Corporation Confidence 100

[APT29](https://attack.mitre.org/groups/G0016) is threat group that has been attributed to Russia's Foreign Intelligence Service (SVR).(Citation: White House Imposing Costs RU Gov April 2021)(Citation: UK Gov Malign RIS Activity April…

First seen 01/01/1970 · Last seen 16/11/5138 ·
interlock uses

Ransomware.Live Confidence 100

No description available

First seen 01/01/1970 · Last seen 16/11/5138 ·
gunra uses

AlienVault Confidence 100

No description available

First seen 01/01/1970 · Last seen 16/11/5138 ·
p0-LUCR-1 uses

AlienVault Confidence 100

First seen 01/01/1970 · Last seen 16/11/5138 ·
SnakeKeylogger uses

AlienVault Confidence 100

First seen 01/01/1970 · Last seen 16/11/5138 ·

Malware (20)

Cobalt Strike - S0154 uses

AlienVault Confidence 100

First seen 01/01/1970 · Last seen 16/11/5138 ·
LIGHTWIRE uses
SilverRAT uses
Erbium uses
Active Hoze uses
mimikatz uses

Family
Gunra Ransomware uses

Family
WIREFIRE uses
SnakeKeylogger uses

Family
Lumma Stealer uses

Family
Rclone uses

Family
SafetyKatz uses

Family

← Previous

Page / 2

1–12 of 20

GUNRA RANSOMWARE: What You Don't Know! related

22 MITREs 3 Malwares 1 APT
SnakeKeylogger – A Multistage Info Stealer Malware Campaign related

17 MITREs 1 Malware 5 Observables 1 APT
Analysis of Interlock Ransomware Attack on Healthcare Facilities related

5 MITREs 1 Malware 1 APT
EDR Bypass Testing Reveals Extortion Actor's Toolkit related

8 MITREs 6 Malwares
Unmasking AsukaStealer: The $80 Malware Threatening Digital Security related

6 MITREs 1 Malware 4 Observables 1 APT

Vulnerabilities (CVE) (5)

CVE-2024-21888 targets

8.8 High

A privilege escalation vulnerability in web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows a user …

Attack vector: NETWORK
Published: 31/01/2024
Modified: 21/12/2025

CVE-2024-22024 targets

8.3 High

An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x), Ivanti Policy Secure (9.x, 22.x) …

Attack vector: Network
Published: 13/02/2024
Modified: 27/05/2026

CVE-2024-21887 KEV targets

9.1 Critical

Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure) and Ivanti Policy Secure contain a command injection vulnerability in the web …

Attack vector: Network
Published: 10/01/2024
Modified: 27/05/2026

CVE-2024-21893 KEV targets

8.2 High

Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure), Ivanti Policy Secure, and Ivanti Neurons contain a server-side request forgery (SSRF) …

Attack vector: Network
Published: 31/01/2024
Modified: 27/05/2026

CVE-2023-46805 KEV targets