Gorgon Group

OriginRússia

Techniques (MITRE ATT&CK)16

SourceMITRE ATT&CK

Vexday analysis

Gorgon Group é um grupo de ameaça cujos membros são suspeitos de ter base no Paquistão ou conexões com o país. O grupo conduziu uma mistura de ataques criminosos e direcionados, incluindo campanhas contra organizações governamentais no Reino Unido, Espanha, Rússia e Estados Unidos. Catalogado no MITRE ATT&CK sob o identificador G0078, o grupo possui 16 técnicas documentadas na matriz.

Techniques (MITRE ATT&CK) 16

How the group operates, mapped to the MITRE ATT&CK matrix and organized by the phases of an attack.

Resource development

Tool

Initial access

Spearphishing Attachment

Execution

PowerShell Windows Command Shell Visual Basic Native API Malicious File

Persistence

Registry Run Keys / Startup Folder Shortcut Modification

Command and control

Ingress Tool Transfer

defense-impairment

Modify Registry Disable or Modify Tools

stealth

Portable Executable Injection Process Hollowing Deobfuscate/Decode Files or Information Hidden Window

Exploited vulnerabilities

No CVEs attributed to this group in public sources (MITRE ATT&CK). Absence of attribution does not mean absence of activity.

Gorgon Group uses real techniques and exploits real flaws. TrueHacking's AI Autonomous Pentest simulates these attacks against your infrastructure and brings more security to your application.

Explore the AI Autonomous Pentest →