S9058 SIGHTGRAB

malwareEnterprise

platformsWindows

also known asSIGHTGRAB

SIGHTGRAB is a Windows executable written in C that captures and stages stolen data on victim devices. SIGHTGRAB was first observed in 2025 and has been affiliated with the cyber espionage threat group NIMBUS MANTICORE.

techniques used (8)

ATT&CK techniques this enables or maps to.

T1005Data from Local System
T1027.013Encrypted/Encoded File
T1074.001Local Data Staging
T1106Native API
T1113Screen Capture
T1119Automated Collection
T1124System Time Discovery
T1140Deobfuscate/Decode Files or Information

used by groups (1)

Threat groups associated with this.

G1059NIMBUS MANTICORE

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan