Malware: CALENDAR

Description

[CALENDAR](https://attack.mitre.org/software/S0025) is malware used by [APT1](https://attack.mitre.org/groups/G0006) that mimics legitimate Gmail Calendar traffic. (Citation: Mandiant APT1)

External References

• mitre-attack
• Mandiant APT1

Techniques Used by This Malware

• T1059.003 — Windows Command Shell
• T1102.002 — Bidirectional Communication

APT Groups Using This Malware

• APT1