Malware: Flame

Description

[Flame](https://attack.mitre.org/software/S0143) is a sophisticated toolkit that has been used to collect information since at least 2010, largely targeting Middle East countries. (Citation: Kaspersky Flame)

External References

• mitre-attack
• Kaspersky Flame
• Crysys Skywiper
• Symantec Beetlejuice

Techniques Used by This Malware

• T1011.001 — Exfiltration Over Bluetooth
• T1036.010 — Masquerade Account Name
• T1091 — Replication Through Removable Media
• T1113 — Screen Capture
• T1123 — Audio Capture
• T1136.001 — Local Account
• T1210 — Exploitation of Remote Services
• T1218.011 — Rundll32
• T1518.001 — Security Software Discovery
• T1547.002 — Authentication Package