SHIPSHAPE

MITRE
Malware Type:
Other
First seen:
Unknown
Last seen:
Unknown
Details:

[SHIPSHAPE](https://attack.mitre.org/software/S0028) is malware developed by [APT30](https://attack.mitre.org/groups/G0013) that allows propagation and exfiltration of data over removable devices. [APT30](https://attack.mitre.org/groups/G0013) may use this capability to exfiltrate data across air-gaps. (Citation: FireEye APT30)

Associated Techniques (3)
ID ATT&CK Tactics
T1091 Replication Through Removable Media -
T1547.001 Registry Run Keys / Startup Folder -
T1547.009 Shortcut Modification -
Used by Actors (1)
Metadata
ID: 496
Created: 13/01/2026 17:48
Updated: 06/03/2026 16:00