{"name":"APT28 — APT Atlas","versions":{"attack":"16","navigator":"5.1.0","layer":"4.5"},"domain":"enterprise-attack","description":"Techniques observed for APT28 (nation-state). Source: https://aptatlas.net/actors/apt28","filters":{"platforms":[]},"sorting":0,"layout":{"layout":"side","aggregateFunction":"average","showID":true,"showName":true},"hideDisabled":false,"techniques":[{"techniqueID":"T1001.001","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Command And Control","enabled":true,"showSubtechniques":true},{"techniqueID":"T1003","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Credential Access","enabled":true,"showSubtechniques":false},{"techniqueID":"T1003.001","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Credential Access","enabled":true,"showSubtechniques":true},{"techniqueID":"T1003.002","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Credential Access","enabled":true,"showSubtechniques":true},{"techniqueID":"T1003.003","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Credential Access","enabled":true,"showSubtechniques":true},{"techniqueID":"T1003.004","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Credential Access","enabled":true,"showSubtechniques":true},{"techniqueID":"T1005","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Collection","enabled":true,"showSubtechniques":false},{"techniqueID":"T1014","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Stealth","enabled":true,"showSubtechniques":false},{"techniqueID":"T1021.002","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Lateral Movement","enabled":true,"showSubtechniques":true},{"techniqueID":"T1025","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Collection","enabled":true,"showSubtechniques":false},{"techniqueID":"T1030","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Exfiltration","enabled":true,"showSubtechniques":false},{"techniqueID":"T1036","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Stealth","enabled":true,"showSubtechniques":false},{"techniqueID":"T1036.005","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Stealth","enabled":true,"showSubtechniques":true},{"techniqueID":"T1037","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Persistence","enabled":true,"showSubtechniques":false},{"techniqueID":"T1037.001","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Persistence","enabled":true,"showSubtechniques":true},{"techniqueID":"T1039","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Collection","enabled":true,"showSubtechniques":false},{"techniqueID":"T1040","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Credential Access","enabled":true,"showSubtechniques":false},{"techniqueID":"T1047","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Execution","enabled":true,"showSubtechniques":false},{"techniqueID":"T1057","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Discovery","enabled":true,"showSubtechniques":false},{"techniqueID":"T1059.001","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Execution","enabled":true,"showSubtechniques":true},{"techniqueID":"T1059.003","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Execution","enabled":true,"showSubtechniques":true},{"techniqueID":"T1059.009","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Execution","enabled":true,"showSubtechniques":true},{"techniqueID":"T1068","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Privilege Escalation","enabled":true,"showSubtechniques":false},{"techniqueID":"T1070.004","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Stealth","enabled":true,"showSubtechniques":true},{"techniqueID":"T1071.001","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Command And Control","enabled":true,"showSubtechniques":true},{"techniqueID":"T1071.003","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Command And Control","enabled":true,"showSubtechniques":true},{"techniqueID":"T1078","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Stealth","enabled":true,"showSubtechniques":false},{"techniqueID":"T1078.004","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Stealth","enabled":true,"showSubtechniques":true},{"techniqueID":"T1083","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Discovery","enabled":true,"showSubtechniques":false},{"techniqueID":"T1090.003","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Command And Control","enabled":true,"showSubtechniques":true},{"techniqueID":"T1091","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Lateral Movement","enabled":true,"showSubtechniques":false},{"techniqueID":"T1092","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Command And Control","enabled":true,"showSubtechniques":false},{"techniqueID":"T1098.002","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Persistence","enabled":true,"showSubtechniques":true},{"techniqueID":"T1102.002","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Command And Control","enabled":true,"showSubtechniques":true},{"techniqueID":"T1105","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Command And Control","enabled":true,"showSubtechniques":false},{"techniqueID":"T1110","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Credential Access","enabled":true,"showSubtechniques":false},{"techniqueID":"T1113","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Collection","enabled":true,"showSubtechniques":false},{"techniqueID":"T1114.002","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Collection","enabled":true,"showSubtechniques":true},{"techniqueID":"T1119","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Collection","enabled":true,"showSubtechniques":false},{"techniqueID":"T1120","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Discovery","enabled":true,"showSubtechniques":false},{"techniqueID":"T1133","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Persistence","enabled":true,"showSubtechniques":false},{"techniqueID":"T1137.002","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Persistence","enabled":true,"showSubtechniques":true},{"techniqueID":"T1140","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Stealth","enabled":true,"showSubtechniques":false},{"techniqueID":"T1189","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Initial Access","enabled":true,"showSubtechniques":false},{"techniqueID":"T1190","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Initial Access","enabled":true,"showSubtechniques":false},{"techniqueID":"T1199","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Initial Access","enabled":true,"showSubtechniques":false},{"techniqueID":"T1203","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Execution","enabled":true,"showSubtechniques":false},{"techniqueID":"T1204.001","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Execution","enabled":true,"showSubtechniques":true},{"techniqueID":"T1210","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Lateral Movement","enabled":true,"showSubtechniques":false},{"techniqueID":"T1211","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Stealth","enabled":true,"showSubtechniques":false},{"techniqueID":"T1213","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Collection","enabled":true,"showSubtechniques":false},{"techniqueID":"T1218.011","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Stealth","enabled":true,"showSubtechniques":true},{"techniqueID":"T1221","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Stealth","enabled":true,"showSubtechniques":false},{"techniqueID":"T1498","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Impact","enabled":true,"showSubtechniques":false},{"techniqueID":"T1528","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Credential Access","enabled":true,"showSubtechniques":false},{"techniqueID":"T1547.001","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Persistence","enabled":true,"showSubtechniques":true},{"techniqueID":"T1550.001","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Lateral Movement","enabled":true,"showSubtechniques":true},{"techniqueID":"T1550.002","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Lateral Movement","enabled":true,"showSubtechniques":true},{"techniqueID":"T1557.004","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Credential Access","enabled":true,"showSubtechniques":true},{"techniqueID":"T1560","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Collection","enabled":true,"showSubtechniques":false},{"techniqueID":"T1560.001","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Collection","enabled":true,"showSubtechniques":true},{"techniqueID":"T1564.001","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Stealth","enabled":true,"showSubtechniques":true},{"techniqueID":"T1564.003","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Stealth","enabled":true,"showSubtechniques":true},{"techniqueID":"T1566","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Initial Access","enabled":true,"showSubtechniques":false},{"techniqueID":"T1566.001","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Initial Access","enabled":true,"showSubtechniques":true},{"techniqueID":"T1566.002","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Initial Access","enabled":true,"showSubtechniques":true},{"techniqueID":"T1567","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Exfiltration","enabled":true,"showSubtechniques":false},{"techniqueID":"T1583.001","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Resource Development","enabled":true,"showSubtechniques":true},{"techniqueID":"T1583.003","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Resource Development","enabled":true,"showSubtechniques":true},{"techniqueID":"T1583.006","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Resource Development","enabled":true,"showSubtechniques":true},{"techniqueID":"T1589.001","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Reconnaissance","enabled":true,"showSubtechniques":true},{"techniqueID":"T1591","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Reconnaissance","enabled":true,"showSubtechniques":false},{"techniqueID":"T1596","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Reconnaissance","enabled":true,"showSubtechniques":false},{"techniqueID":"T1598","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Reconnaissance","enabled":true,"showSubtechniques":false},{"techniqueID":"T1669","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Initial Access","enabled":true,"showSubtechniques":false},{"techniqueID":"T1684.001","score":1,"color":"#5ce1ff","comment":"Observed for APT28 · Stealth","enabled":true,"showSubtechniques":true}],"gradient":{"colors":["#0d1230","#5ce1ff"],"minValue":0,"maxValue":1},"legendItems":[{"label":"Used by APT28","color":"#5ce1ff"}],"metadata":[{"name":"source","value":"APT Atlas"},{"name":"actor_id","value":"apt28"},{"name":"mitre_gid","value":"G0007"}]}