Gorgon Group
Gorgon Group is a threat group consisting of members who are suspected to be Pakistan-based or have other connections to Pakistan. The group has performed a mix of criminal and targeted attacks, including campaigns against government organizations in the United Kingdom, Spain, Russia, and the United States.
- ATT&CK ID
- G0078
- Origin
- Pakistan
- Techniques
- 12
- Tools
- 4
Techniques
Resource Development
Initial Access
Execution
Command and Scripting InterpreterNative APIUser Execution
Persistence
Modify RegistryBoot or Logon Autostart Execution
Privilege Escalation
Process InjectionBoot or Logon Autostart Execution
Stealth
Process InjectionDeobfuscate/Decode Files or InformationHide Artifacts
Defense Impairment
Modify RegistryDisable or Modify Tools
Command and Control
Software
NanoCore · QuasarRAT · Remcos · njRAT