Indicator Removal T1070
Adversaries may selectively delete or modify artifacts generated to reduce indications of their presence and blend in with legitimate activity. Rather than broadly removing evidence, adversaries may target specific artifacts that appear anomalous or are likely to draw scrutiny, while leaving…
- Tactics
- Stealth
- Actors using it
- 51
- Sub-techniques
- 4
Ransomware groups reported using it
thegentlemenqilinincransomBrainCiphersafepayplaypayloadMajinahanashinightspiredragonforceclop
Threat actors
- KimsukyNorth Korea · Black Banshee, Velvet Chollima, Emerald Sleet · 87 techniques
- APT28Russia · IRON TWILIGHT, SNAKEMACKEREL, Swallowtail · 73 techniques
- APT38North Korea · NICKEL GLADSTONE, BeagleBoyz, Bluenoroff · 70 techniques
- Lazarus GroupNorth Korea · Labyrinth Chollima, HIDDEN COBRA, Guardians of Peace · 69 techniques
- APT41China · Wicked Panda, Brass Typhoon, BARIUM · 66 techniques
- Sandworm TeamRussia · ELECTRUM, Telebots, IRON VIKING · 64 techniques
- Mustang PandaChina · TA416, RedDelta, BRONZE PRESIDENT · 61 techniques
- Volt TyphoonChina · BRONZE SILHOUETTE, Vanguard Panda, DEV-0391 · 58 techniques
- OilRigIran · COBALT GYPSY, IRN2, APT34 · 58 techniques
- Magic HoundIran · TA453, COBALT ILLUSION, Charming Kitten · 58 techniques
- APT32Vietnam · SeaLotus, OceanLotus, APT-C-00 · 55 techniques
- Gamaredon GroupRussia · IRON TILDEN, Primitive Bear, ACTINIUM · 55 techniques
- Medusa Group52 techniques
- Scattered SpiderRoasted 0ktapus, Octo Tempest, Storm-0875 · 50 techniques
- ChimeraChina · 49 techniques
- Wizard SpiderRussia · UNC1878, TEMP.MixMaster, Grim Spider · 49 techniques
- DragonflyRussia · TEMP.Isotope, DYMALLOY, Berserk Bear · 48 techniques
- APT29Russia · IRON RITUAL, IRON HEMLOCK, NobleBaron · 47 techniques
- Threat Group-3390China · Earth Smilodon, TG-3390, Emissary Panda · 47 techniques
- NIMBUS MANTICOREUNC1549, TA455, COBALT SMOKEY · 45 techniques
- BlackByteHecamede · 44 techniques
- Salt TyphoonChina · 43 techniques
- TeamTNT43 techniques
- APT3China · Gothic Panda, Pirpi, UPS Team · 40 techniques
- APT39Iran · ITG07, Chafer, Remix Kitten · 39 techniques
- Ember BearRussia · UNC2589, Bleeding Bear, DEV-0586 · 39 techniques
- menuPassChina · Cicada, POTASSIUM, Stone Panda · 37 techniques
- UNC3886China · 37 techniques
- MirrorFaceChina · Earth Kasha · 37 techniques
- Tropic TrooperPirate Panda, KeyBoy · 35 techniques
- PatchworkHangover Group, Dropping Elephant, Chinastrats · 34 techniques
- Contagious InterviewDeceptiveDevelopment, Gwisin Gang, Tenacious Pungsan · 34 techniques
- FIN6Magecart Group 6, ITG08, Skeleton Spider · 33 techniques
- BRONZE BUTLERChina · REDBALDKNIGHT, Tick · 33 techniques
- RedCurlRussia · 32 techniques
- FIN8Syssphinx · 31 techniques
- RockeChina · 29 techniques
- APT42Iran · 29 techniques
- Cobalt GroupGOLD KINGSWOOD, Cobalt Gang, Cobalt Spider · 26 techniques
- Aquatic PandaChina · 25 techniques
- INC RansomGOLD IONIC · 25 techniques
- SilenceWhisper Spider · 25 techniques
- APT5China · Mulberry Typhoon, MANGANESE, BRONZE FLEETWOOD · 22 techniques
- Play22 techniques
- Evilnum11 techniques
- APT18TG-0416, Dynamite Panda, Threat Group-0416 · 11 techniques
- FIN511 techniques
- FIN109 techniques
- Metador8 techniques
- The White Company7 techniques
- Group5Iran · 4 techniques