Malware: GLOOXMAIL

Description

[GLOOXMAIL](https://attack.mitre.org/software/S0026) is malware used by [APT1](https://attack.mitre.org/groups/G0006) that mimics legitimate Jabber/XMPP traffic. (Citation: Mandiant APT1)

External References

• mitre-attack
• Mandiant APT1

Techniques Used by This Malware

• T1071.005 — Publish/Subscribe Protocols
• T1102.002 — Bidirectional Communication

APT Groups Using This Malware

• APT1