S1088 Disco

malwareEnterprise

platformsWindows

also known asDisco

Disco is a custom implant that has been used by MoustachedBouncer since at least 2020 including in campaigns using targeted malicious content injection for initial access and command and control.

techniques used (5)

ATT&CK techniques this enables or maps to.

T1053.005Scheduled Task
T1071.002File Transfer Protocols
T1105Ingress Tool Transfer
T1204.002Malicious File
T1659Content Injection

used by groups (1)

Threat groups associated with this.

G1019MoustachedBouncer

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan