C0001 Frankenstein
active2019-01-01 – 2019-04-01
also known asFrankenstein
Frankenstein was described by security researchers as a highly-targeted campaign conducted by moderately sophisticated and highly resourceful threat actors in early 2019. The unidentified actors primarily relied on open source tools, including Empire. The campaign name refers to the actors' ability to piece together several unrelated open-source tool components.
01
techniques used (27)
ATT&CK techniques this enables or maps to.
showing 20 of 27
02
software used (1)
Malware and tools associated with this.
03
source
Where this definition is published.