Malware: Unknown Logger

Description

[Unknown Logger](https://attack.mitre.org/software/S0130) is a publicly released, free backdoor. Version 1.5 of the backdoor has been used by the actors responsible for the MONSOON campaign. (Citation: Forcepoint Monsoon)

External References

• mitre-attack
• Forcepoint Monsoon

Techniques Used by This Malware

• T1016 — System Network Configuration Discovery
• T1033 — System Owner/User Discovery
• T1056.001 — Keylogging
• T1082 — System Information Discovery
• T1091 — Replication Through Removable Media
• T1105 — Ingress Tool Transfer
• T1555.003 — Credentials from Web Browsers
• T1562.001 — Disable or Modify Tools

APT Groups Using This Malware

• Patchwork