Source: MITRE_ATTCK
Threat actor: APT28
Affected sector: Unknown
Attack vector: Unknown Tactic
Severity: High
Confidence: High
MITRE ATT&CK techniques: T1037.001
Description:
MITRE ATT&CK technique T1037.001 (Logon Script (Windows)) used by APT28. Adversaries may use Windows logon scripts automatically executed at logon initialization to establish persistence. Windows allows logon scripts to be run whenever a specific user or group of users log...