Skip to content

Gallmaker

Gallmaker is a cyberespionage group that has targeted victims in the Middle East and has been active since at least December 2017. The group has mainly targeted victims in the defense, military, and government sectors.

ATT&CK ID: G0084
Techniques: 6
Tools: 0

Techniques

Initial Access

Execution

Command and Scripting Interpreter User Execution Inter-Process Communication

Stealth

Obfuscated Files or Information

Collection

Archive Collected Data

MITRE ATT&CK All threat actors