Home / Threat actors / Sowbug
Sowbug G0054
Updated at source on Jul 31, 2026 · View on MITRE ATT&CK
0
associated CVEs
10
Techniques
2
Malware and tools
Sowbug is a threat group that has conducted targeted attacks against organizations in South America and Southeast Asia, particularly government entities, since at least 2015.
Exploited vulnerabilities
CVEs cited by MITRE ATT&CK for this group, with the source excerpt. Records not yet published here appear without a link.
ATT&CK does not cite CVEs for this group.
Techniques by tactic
Execution
T1059.003 Windows Command Shell Stealth
T1036.005 Match Legitimate Resource Name or Location Credential Access
T1003 OS Credential DumpingT1056.001 Keylogging Discovery
T1082 System Information DiscoveryT1083 File and Directory DiscoveryT1135 Network Share Discovery Collection
T1039 Data from Network Shared DriveT1056.001 KeyloggingT1560.001 Archive via Utility Malware and tools
- FelismusMalwareS0171
- StarloaderMalwareS0188
© The MITRE Corporation. ATT&CK® content reproduced and distributed with the permission of The MITRE Corporation.