G0126 Higaisa
Enterprisealso known asHigaisa
Higaisa is a threat group suspected to have South Korean origins. Higaisa has targeted government, public, and trade organizations in North Korea; however, they have also carried out attacks in China, Japan, Russia, Poland, and other nations. Higaisa was first disclosed in early 2019 but is assessed to have operated as early as 2009.
01
canonical actor
The group this is attributed to.
02
techniques used (28)
ATT&CK techniques this enables or maps to.
showing 20 of 28
03
software used (3)
Malware and tools associated with this.
04
source
Where this definition is published.