Free scan↗
  • English
  • Deutsch

CURIUM

threat actor
01

also known as

Other names and identifiers for this entity.

ATT&CK

CURIUM · Crimson Sandstorm · TA456 · Tortoise Shell · Yellow Liderc

02

resolved ATT&CK groups

Threat groups associated with this.

  • G1012CURIUM
03

techniques used (19)

ATT&CK techniques this enables or maps to.

  • T1005Data from Local System
  • T1041Exfiltration Over C2 Channel
  • T1048.002Exfiltration Over Asymmetric Encrypted Non-C2 Protocol
  • T1059.001PowerShell
  • T1082System Information Discovery
  • T1124System Time Discovery
  • T1189Drive-by Compromise
  • T1204.002Malicious File
  • T1505.003Web Shell
  • T1566.001Spearphishing Attachment
  • T1566.003Spearphishing via Service
  • T1583.001Domains
  • T1583.003Virtual Private Server
  • T1583.004Server
  • T1584.006Web Services
  • T1585.001Social Media Accounts
  • T1585.002Email Accounts
  • T1598.003Spearphishing Link
  • T1608.004Drive-by Target
04

software used (1)

Malware and tools associated with this.

  • S1152IMAPLoader
by temnirPrivacySources
Built in Europe© 2026 datadir s.r.o.
v0.1.142checking…