Software Deployment Tools T1072
Adversaries may gain access to and use centralized software suites installed within an enterprise to execute commands and move laterally through the network. Configuration management and software deployment applications may be used in an enterprise network or cloud environment for routine…
- Tactics
- Execution, Lateral Movement
- Actors using it
- 10
- Sub-techniques
- 0
Ransomware groups reported using it
Threat actors
- Sandworm TeamRussia · ELECTRUM, Telebots, IRON VIKING · 64 techniques
- Mustang PandaChina · TA416, RedDelta, BRONZE PRESIDENT · 61 techniques
- APT32Vietnam · SeaLotus, OceanLotus, APT-C-00 · 55 techniques
- Medusa Group52 techniques
- VOID MANTICOREIran · COBALT MYSTIQUE, Handala Hack, Homeland Justice · 51 techniques
- NIMBUS MANTICOREUNC1549, TA455, COBALT SMOKEY · 45 techniques
- Salt TyphoonChina · 43 techniques
- ShinyHuntersUNC6240, Bling Libra · 39 techniques
- SilenceWhisper Spider · 25 techniques
- Threat Group-1314TG-1314 · 4 techniques