PLATINUM

Techniques (MITRE ATT&CK)11

SourceMITRE ATT&CK

Also known as:ATK33G0068TwoForOne

Vexday analysis

Ativo desde pelo menos 2009, o PLATINUM (identificador MITRE ATT&CK G0068) é um grupo de ameaça persistente avançada que concentra suas operações contra governos e organizações a eles relacionadas no Sul e no Sudeste Asiático. O grupo possui 11 técnicas documentadas no framework MITRE ATT&CK.

Attack chain

Plausible scenario built from the group's real techniques, ordered by the phases of an attack. Each step shows how the group typically operates.

Arsenal severity25

Impact: High

Illustrative chain derived from techniques documented in MITRE ATT&CK — it does not represent a specific past attack. Severity summarizes the known arsenal (kill-chain coverage, actively exploited CVEs, techniques).

Techniques (MITRE ATT&CK) 11

How the group operates, mapped to the MITRE ATT&CK matrix and organized by the phases of an attack.

Initial access

Drive-by Compromise Spearphishing Attachment

Execution

Malicious File

Privilege escalation

Exploitation for Privilege Escalation

Credential access

LSASS Memory

Collection

Keylogging Credential API Hooking

Command and control

Non-Application Layer Protocol Ingress Tool Transfer

stealth

Masquerading Process Injection

Exploited vulnerabilities

No CVEs attributed to this group in public sources (MITRE ATT&CK). Absence of attribution does not mean absence of activity.

References

PLATINUM uses real techniques and exploits real flaws. TrueHacking's AI Autonomous Pentest simulates these attacks against your infrastructure and brings more security to your application.

Explore the AI Autonomous Pentest →