G1035 Winter Vivern
Enterprisealso known asWinter Vivern · TA473 · UAC-0114
Winter Vivern is a group linked to Russian and Belorussian interests active since at least 2020 targeting various European government and NGO entities, along with sporadic targeting of Indian and US victims. The group leverages a combination of document-based phishing activity and server-side exploitation for initial access, leveraging adversary-controlled and -created infrastructure for follow-on command and control.
01
canonical actor
The group this is attributed to.
02
techniques used (27)
ATT&CK techniques this enables or maps to.
showing 20 of 27
03
source
Where this definition is published.