BITTER

OriginChina

Techniques (MITRE ATT&CK)16

SourceMITRE ATT&CK

Also known as:T-APT-17

Vexday analysis

BITTER (também conhecido como T-APT-17, identificador MITRE ATT&CK G1002) é um grupo de espionagem cibernética suspeito de origem sul-asiática, ativo pelo menos desde 2013. O grupo tem como alvos organizações governamentais, do setor de energia e de engenharia no Paquistão, China, Bangladesh e Arábia Saudita. Sua atuação está documentada com 16 técnicas no framework MITRE ATT&CK e 5 CVEs atribuídas ao grupo.

Techniques (MITRE ATT&CK) 16

How the group operates, mapped to the MITRE ATT&CK matrix and organized by the phases of an attack.

Resource development

Domains Tool Upload Malware

Initial access

Spearphishing Attachment

Execution

Scheduled Task Exploitation for Client Execution Malicious File Dynamic Data Exchange

Privilege escalation

Exploitation for Privilege Escalation

Command and control

Web Protocols Non-Application Layer Protocol Ingress Tool Transfer Dynamic Resolution Encrypted Channel

stealth

Encrypted/Encoded File Masquerade Task or Service

Exploited vulnerabilities 5

CVEs this group is known to exploit, per MITRE ATT&CK. Ordered by real-world severity.

CVE-2012-0158HIGHEPSS 100%KEV CVE-2017-11882HIGHEPSS 100%KEV CVE-2018-0798HIGHEPSS 95%KEV CVE-2018-0802HIGHEPSS 93%KEV CVE-2021-1732HIGHEPSS 78%KEV

BITTER uses real techniques and exploits real flaws. TrueHacking's AI Autonomous Pentest simulates these attacks against your infrastructure and brings more security to your application.

Explore the AI Autonomous Pentest →