Winter Vivern

MISP
Type:
Unknown
Country:
RU
First seen:
Unknown
Details:

Winter Vivern is a group linked to Russian and Belorussian interests active since at least 2020 targeting various European government and NGO entities, along with sporadic targeting of Indian and US victims. The group leverages a combination of document-based phishing activity and server-side exploitation for initial access, leveraging adversary-controlled and -created infrastructure for follow-on command and control.(Citation: DomainTools WinterVivern 2021)(Citation: SentinelOne WinterVivern 2023)(Citation: CERT-UA WinterVivern 2023)(Citation: ESET WinterVivern 2023)(Citation: Proofpoint WinterVivern 2023)

MITRE ATT&CK: View on MITRE
Techniques Used (27)
ID ATT&CK Tactics
T1020 Automated Exfiltration -
T1033 System Owner/User Discovery -
T1036 Masquerading -
T1036.004 Masquerade Task or Service -
T1041 Exfiltration Over C2 Channel -
T1053.005 Scheduled Task -
T1056.003 Web Portal Capture -
T1059 Command and Scripting Interpreter -
T1059.001 PowerShell -
T1059.003 Windows Command Shell -
T1059.007 JavaScript -
T1071.001 Web Protocols -
T1082 System Information Discovery -
T1083 File and Directory Discovery -
T1105 Ingress Tool Transfer -
References (8)
Aliases (1164)
UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114 UAC-0114 TA473 TAG-70 TA-473 TA473 UAC-0114
Metadata
ID: 438
Created: 13/01/2026 17:48
Updated: 20/04/2026 16:00