S1042 SUGARDUMP
malwareEnterpriseplatformsWindows
also known asSUGARDUMP
SUGARDUMP is a proprietary browser credential harvesting tool that was used by UNC3890 during the C0010 campaign. The first known SUGARDUMP version was used since at least early 2021, a second SMTP C2 version was used from late 2021-early 2022, and a third HTTP C2 variant was used since at least April 2022.
01
techniques used (13)
ATT&CK techniques this enables or maps to.
02
used by campaigns (1)
Campaigns that use this.
03
source
Where this definition is published.
scry
Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan