Home / Threat actors / Evilnum
Evilnum G0120
Updated at source on Jul 31, 2026 · View on MITRE ATT&CK
0
associated CVEs
13
Techniques
3
Malware and tools
Evilnum is a financially motivated threat group that has been active since at least 2018.
Exploited vulnerabilities
CVEs cited by MITRE ATT&CK for this group, with the source excerpt. Records not yet published here appear without a link.
ATT&CK does not cite CVEs for this group.
Techniques by tactic
Initial Access
T1566.002 Spearphishing Link Execution
T1059.007 JavaScriptT1204.001 Malicious LinkT1574.001 DLL Privilege Escalation
T1548.002 Bypass User Account Control Stealth
T1070.004 File DeletionT1497.001 System ChecksT1574.001 DLL Credential Access
T1539 Steal Web Session CookieT1555 Credentials from Password Stores Discovery
T1497.001 System Checks Command and Control
T1105 Ingress Tool TransferT1219.002 Remote Desktop Software © The MITRE Corporation. ATT&CK® content reproduced and distributed with the permission of The MITRE Corporation.