Home / Threat actors / Equation
Equation G0020
Updated at source on Jul 31, 2026 · View on MITRE ATT&CK
0
associated CVEs
5
Techniques
0
Malware and tools
Equation is a sophisticated threat group that employs multiple remote access tools. The group is known to use zero-day exploits and has developed the capability to overwrite the firmware of hard disk drives.
Exploited vulnerabilities
CVEs cited by MITRE ATT&CK for this group, with the source excerpt. Records not yet published here appear without a link.
ATT&CK does not cite CVEs for this group.
Techniques by tactic
Persistence
T1542.002 Component Firmware Stealth
T1480.001 Environmental KeyingT1542.002 Component FirmwareT1564.005 Hidden File System Discovery
T1120 Peripheral Device Discovery © The MITRE Corporation. ATT&CK® content reproduced and distributed with the permission of The MITRE Corporation.