🌐ToddyCat
🌐 ToddyCat is a tracked threat actor in the Clankerusecase corpus. ??-aligned. Primary motivation: Unknown. We map 14 detection use cases to this actor across 25 MITRE ATT&CK techniques, with 0 threat-intel articles citing them.
14Use cases
0Articles
25Techniques
0IOCs
About this actor (MITRE)
[ToddyCat](https://attack.mitre.org/groups/G1022) is a sophisticated threat group that has been active since at least 2020 using custom loaders and malware in multi-stage infection chains against government and military targets across Europe and Asia.(Citation: Kaspersky ToddyCat June 2022)(Citation: Kaspersky ToddyCat Check Logs October 2023)
Known aliases
ToddyCat
Top techniques
All other tracked techniques
T1036.005 · Match Legitimate Resource Name or LocationT1047 · Windows Management InstrumentationT1049 · System Network Connections DiscoveryT1053.005 · Scheduled TaskT1057 · Process DiscoveryT1059.001 · PowerShellT1059.003 · Windows Command ShellT1069.002 · Domain GroupsT1074.002 · Remote Data StagingT1078.002 · Domain AccountsT1083 · File and Directory DiscoveryT1087.002 · Domain AccountT1095 · Non-Application Layer ProtocolT1106 · Native APIT1190 · Exploit Public-Facing ApplicationT1518.001 · Security Software DiscoveryT1560.001 · Archive via UtilityT1564.003 · Hidden WindowT1566.003 · Spearphishing via ServiceT1567.002 · Exfiltration to Cloud StorageT1680 · Local Storage DiscoveryT1686 · Disable or Modify System Firewall