Skip to content

Evilnum

Evilnum is a financially motivated threat group that has been active since at least 2018.

ATT&CK ID: G0120
Techniques: 11
Tools: 3

Techniques

Initial Access

Execution

Command and Scripting Interpreter User Execution Hijack Execution Flow

Privilege Escalation

Abuse Elevation Control Mechanism

Stealth

Indicator Removal Virtualization/Sandbox Evasion Hijack Execution Flow

Credential Access

Steal Web Session Cookie Credentials from Password Stores

Discovery

Virtualization/Sandbox Evasion

Command and Control

Ingress Tool Transfer Remote Access Tools

Software

EVILNUM · LaZagne · More_eggs

MITRE ATT&CK All threat actors