coldbraid

Threat Group-1314

Threat Group-1314 is an unattributed threat group that has used compromised credentials to log into a victim's remote access infrastructure.

ATT&CK ID
G0028
Techniques
4
Tools
2

Also tracked as TG-1314

Techniques

Initial Access

Valid Accounts

Execution

Command and Scripting InterpreterSoftware Deployment Tools

Persistence

Valid Accounts

Privilege Escalation

Valid Accounts

Stealth

Valid Accounts

Lateral Movement

Remote ServicesSoftware Deployment Tools

Software

Net · PsExec