Winter Vivern
MISP
Tipo:
Unknown
Unknown
Paese:
RU
RU
Prima attivita:
Unknown
Unknown
Dettagli:
Winter Vivern is a cyberespionage group first revealed by DomainTools in 2021. It is thought to have been active since at least 2020 and it targets governments in Europe and Central Asia. To compromise its targets, the group uses malicious documents, phishing websites, and a custom PowerShell backdoor.
MITRE ATT&CK:
View on MITRE
Tecniche Utilizzate (27)
| ID | ATT&CK | Tattiche |
|---|---|---|
| T1020 | Automated Exfiltration | - |
| T1033 | System Owner/User Discovery | - |
| T1036 | Masquerading | - |
| T1036.004 | Masquerade Task or Service | - |
| T1041 | Exfiltration Over C2 Channel | - |
| T1053.005 | Scheduled Task | - |
| T1056.003 | Web Portal Capture | - |
| T1059 | Command and Scripting Interpreter | - |
| T1059.001 | PowerShell | - |
| T1059.003 | Windows Command Shell | - |
| T1059.007 | JavaScript | - |
| T1071.001 | Web Protocols | - |
| T1082 | System Information Discovery | - |
| T1083 | File and Directory Discovery | - |
| T1105 | Ingress Tool Transfer | - |
Riferimenti (8)
- sentinelone.com - Winter Vivern Uncovering A Wave Of Global Espionage
- domaintools.com - Winter Vivern A Look At Re Crafted Government Maldocs
- welivesecurity.com - Winter Vivern Exploits Zero Day Vulnerability Roundcube Webmail Servers
- proofpoint.com - Exploitation Dish Best Served Cold Winter Vivern Uses Known Zimbra Vulnerability
- socprime.com - Uac 0114 Group Aka Winter Vivern Attack Detection Hackers Launch Malicious Phishing Campaigns Targeting Government Entities Of Ukraine And Poland
- cybersecuritynews.com - Russian Hackers Xss Flaw
- recordedfuture.com - Russia Aligned Tag 70 Targets European Government And Military Mail
- bsi.bund.de - Aktive Apt Gruppen Node
Alias (630)
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
TA473
UAC-0114
UAC-0114
TA473
TAG-70
TA-473
Metadata
| ID: | 438 |
| Created: | 13/01/2026 17:48 |
| Updated: | 07/03/2026 04:00 |