AttackIQ

Reported Context (6)

AttackIQ released emulations of its TTPs to help organizations validate detection and prevention against the group’s Windows, Linux, and ESXi-focused operations. AttackIQ Releases Two Emulations of The Gentlemen Ransomware TTPs
leverages living-off-the-land tools (PowerShell, WMI, PsExec) and credential dumping (Mimikatz), and AttackIQ released an emulation to validate defenses against these behaviors. AttackIQ Releases NightSpire Ransomware Emulation for Defense Testing
AttackIQ published a RoningLoader emulation in its AEV platform to reproduce the group’s post-compromise TTPs and help organizations validate detection, prevention, and continuous testing of security controls. AttackIQ Releases RoningLoader Emulation for DragonBreath Behaviors
AttackIQ released an emulation of Sinobi’s TTPs for its Adversarial Exposure Validation (AEV) platform to help organizations validate detection, prevention, and response against discovery, privilege escalation, network AttackIQ Releases Sinobi Ransomware Emulation for Security Control Validation
AttackIQ released an emulation on its AEV platform that reproduces LokiLocker deployment TTPs to validate detection, prevention, and response controls. AttackIQ Adds LokiLocker Ransomware Emulation to AEV Platform

CVE (1)

Malware (9)

Threat Actors (6)

MITRE ATT&CK (36)

Products (8)

Tools (5)

Industries (8)

Countries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.