216.73.217.22

Void Arachne

· Published 21/12/2025 05:27 · Modified 21/12/2025 05:27 · Source: AlienVault

Essential information

Confidence
100/100
Published
21/12/2025 05:27
Modified
21/12/2025 05:27
Updated at
21/12/2025 05:27
Revoked
No
Author / Source
AlienVault
Resource level
—
Primary motivation
—
Related entities
3 reports, 26 attack patterns (mitre), 5 malware, 3 sectors, 2 countries, 69 indicators, 1 vulnerabilities (cve)

Description

No description.

Marking (TLP)

TLP:CLEAR

Related entities

Attack patterns, malware, vulnerabilities, indicators and other entities linked to this intrusion set.

Reports (3)

Attack patterns (MITRE) (26)

  • T1059 uses
    Command and Scripting Interpreter
  • T1036 uses
    Masquerading
  • T1192 uses
  • T1566 uses
    Phishing
  • T1055 uses
    Process Injection
  • T1573 uses
    Encrypted Channel
  • T1113 uses
    Screen Capture
  • T1140 uses
    Deobfuscate/Decode Files or Information
  • T1566.001 uses
    Spearphishing Attachment
  • T1078 uses
    Valid Accounts
  • T1115 uses
    Clipboard Data
  • T1193 uses
  • T1105 uses
    Ingress Tool Transfer
  • T1005 uses
    Data from Local System
  • T1057 uses
    Process Discovery
  • T1204 uses
    User Execution
  • T1082 uses
    System Information Discovery
  • T1132 uses
    Data Encoding
  • T1608 uses
    Stage Capabilities
  • T1566.002 uses
    Spearphishing Link
  • T1547 uses
    Boot or Logon Autostart Execution
  • T1071 uses
    Application Layer Protocol
  • T1534 uses
    Internal Spearphishing
  • T1571 uses
    Non-Standard Port
  • T1056.001 uses
    Keylogging
  • T1027 uses
    Obfuscated Files or Information

Malware (5)

  • Mydoor uses
    Family
    Published 17/04/2026 23:18 · Modified 17/04/2026 23:18
  • ValleyRAT uses
    Family
    Published 08/06/2026 10:30 · Modified 08/06/2026 10:30
  • gh0st RAT - S0032 uses
    Family
    Published 17/04/2026 23:18 · Modified 17/04/2026 23:18
  • Winos 4.0 uses
    Family
    Published 30/04/2026 09:42 · Modified 30/04/2026 09:42
  • Winos uses
    Family
    Published 10/07/2024 10:19 · Modified 10/07/2024 10:19

Sectors (3)

  • Education targets
  • Entertainment industry targets
  • Manufacturing targets

Countries (2)

  • Japan targets
  • China targets

Indicators (69)

Vulnerabilities (CVE) (1)

CVE-2024-21412 KEV
8.1 High

Microsoft Windows Internet Shortcut Files contains an unspecified vulnerability that allows for a security feature bypass.

Attack vector
Network
Published
13/02/2024
Modified
27/05/2026