NEW: Group Profiler — instant APT intel lookup. Try it →

← threatfilter.dev / all groups / Suckfly

Suckfly

G0039 China MITRE ATT&CK →

Overview

Suckfly is a China-based threat group that has been active since at least 2014.

TTPs — 5 techniques across 5 tactics

Execution

T1059.003 Windows Command Shell

Stealth

T1078 Valid Accounts

Defense Impairment

T1553.002 Code Signing

Credential Access

T1003 OS Credential Dumping

Discovery

T1046 Network Service Discovery

Tools & malware (1)

Nidiran

Reporting (2)

Indian organizations targeted in Suckfly attacks — DiMaggio, J
Suckfly: Revealing the secret life of your code signing certificates — DiMaggio, J