Source: MITRE_ATTCK
Threat actor: APT28
Affected sector: Unknown
Attack vector: Malware Infection
Severity: High
Confidence: High
MITRE ATT&CK techniques: T1078,T1110,T1003
Description:
MITRE ATT&CK mapping: APT28 utilizes malware 'XTunnel'. [XTunnel](https://attack.mitre.org/software/S0117) a VPN-like network proxy tool that can relay traffic between a C2 server and a victim. It was first seen in May 2013 and reportedly used by [APT28](h...