G0108 Blue Mockingbird
Enterprisealso known asBlue Mockingbird
Blue Mockingbird is a cluster of observed activity involving Monero cryptocurrency-mining payloads in dynamic-link library (DLL) form on Windows systems. The earliest observed Blue Mockingbird tools were created in December 2019.
01
canonical actor
The group this is attributed to.
02
techniques used (22)
ATT&CK techniques this enables or maps to.
showing 20 of 22
03
software used (2)
Malware and tools associated with this.
04
source
Where this definition is published.