Source: MITRE_ATTCK
Threat actor: APT28
Affected sector: Unknown
Attack vector: Malware Infection
Severity: High
Confidence: High
MITRE ATT&CK techniques: T1078,T1110,T1003
Description:
MITRE ATT&CK mapping: APT28 utilizes tool 'Responder'. Responder is an open source tool used for LLMNR, NBT-NS and MDNS poisoning, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP a...