← threatfilter.dev / all groups / Equation
Equation
Overview
Equation is a sophisticated threat group that employs multiple remote access tools. The group is known to use zero-day exploits and has developed the capability to overwrite the firmware of hard disk drives.
TTPs — 4 techniques across 2 tactics
Stealth
-
T1480.001Environmental Keying -
T1542.002Component Firmware -
T1564.005Hidden File System
Discovery
Reporting (1)
- Equation Group: Questions and Answers — Kaspersky Lab's Global Research and Analysis Team