S0453 Pony

malwareEnterprise

platformsWindows

also known asPony

Pony is a credential stealing malware, though has also been used among adversaries for its downloader capabilities. The source code for Pony Loader 1.0 and 2.0 were leaked online, leading to their use by various threat actors.

techniques used (16)

ATT&CK techniques this enables or maps to.

T1027.015Compression
T1027.016Junk Code Insertion
T1036Masquerading
T1059.003Windows Command Shell
T1070.004File Deletion
T1071.001Web Protocols
T1082System Information Discovery
T1087.001Local Account
T1105Ingress Tool Transfer
T1106Native API
T1110.001Password Guessing
T1204.001Malicious Link
T1204.002Malicious File
T1497.003Time Based Checks
T1566.001Spearphishing Attachment
T1566.002Spearphishing Link

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan