S0033 NetTraveler
NetTraveler is malware that has been used in multiple cyber espionage campaigns for basic surveillance of victims. The earliest known samples have timestamps back to 2005, and the largest number of observed samples were created between 2010 and 2013. 1
| Item | Value |
|---|---|
| ID | S0033 |
| Associated Names | |
| Type | MALWARE |
| Version | 1.1 |
| Created | 31 May 2017 |
| Last Modified | 30 March 2020 |
| Navigation Layer | View In ATT&CK® Navigator |
Techniques Used
| Domain | ID | Name | Use |
|---|---|---|---|
| enterprise | T1010 | Application Window Discovery | NetTraveler reports window names along with keylogger information to provide application context.1 |
| enterprise | T1056 | Input Capture | - |
| enterprise | T1056.001 | Keylogging | NetTraveler contains a keylogger.1 |
Groups That Use This Software
| ID | Name | References |
|---|---|---|
| G0062 | TA459 | 2 |