Malware: OLDBAIT

Description

[OLDBAIT](https://attack.mitre.org/software/S0138) is a credential harvester used by [APT28](https://attack.mitre.org/groups/G0007). (Citation: FireEye APT28) (Citation: FireEye APT28 January 2017)

External References

• mitre-attack
• FireEye APT28 January 2017
• FireEye APT28

Techniques Used by This Malware

• T1027 — Obfuscated Files or Information
• T1036.005 — Match Legitimate Resource Name or Location
• T1071.001 — Web Protocols
• T1071.003 — Mail Protocols
• T1555 — Credentials from Password Stores
• T1555.003 — Credentials from Web Browsers

APT Groups Using This Malware

• APT28