coldbraid

Sowbug

Sowbug is a threat group that has conducted targeted attacks against organizations in South America and Southeast Asia, particularly government entities, since at least 2015.

ATT&CK ID
G0054
Techniques
9
Tools
2

Techniques

Execution

Command and Scripting Interpreter

Stealth

Masquerading

Credential Access

OS Credential DumpingInput Capture

Discovery

System Information DiscoveryFile and Directory DiscoveryNetwork Share Discovery

Collection

Data from Network Shared DriveInput CaptureArchive Collected Data

Software

Felismus · Starloader