S0534 Bazar

malwareEnterprise

platformsWindows

also known asBazar · KEGTAP · Team9 · Bazaloader

Bazar is a downloader and backdoor that has been used since at least April 2020, with infections primarily against professional services, healthcare, manufacturing, IT, logistics and travel companies across the US and Europe. Bazar reportedly has ties to TrickBot campaigns and can be used to deploy additional malware, including ransomware, and to steal sensitive data.

01

techniques used (51)

ATT&CK techniques this enables or maps to.

02

used by groups (2)

Threat groups associated with this.

03

used by campaigns (1)

Campaigns that use this.

04

source

Where this definition is published.

view on ATT&CK
scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan