G0039 · 5 ATT&CK techniques · 0 correlated reports

Suckfly

Aliases: None listed

Suckfly is a China-based threat group that has been active since at least 2014.

Open interactive actor investigation

ATT&CK techniques

T1059.003
Windows Command ShellT1078
Valid AccountsT1046
Network Service DiscoveryT1003
OS Credential DumpingT1553.002
Code Signing

Correlated CTI and IR reports

Continue the investigation

Interactive ThreatMapper ThreatMapper documentation CTI Analyst Field Manual Israel Threat Actors CTI Anomaly Detection Atlas ITDR Handbook 1200km Medium research