CVE Intelligence

AppleJeus G1049

🔔 Criar alerta

Também conhecido como: Gleaming Pisces, Citrine Sleet, UNC1720, UNC4736

Atualizado na fonte em 31/07/2026 · Ver no MITRE ATT&CK

1
CVEs associadas
2
Técnicas
0
Malwares e ferramentas

AppleJeus is a North Korean state-sponsored threat group attributed to the Reconnaissance General Bureau. Associated with the broader Lazarus Group umbrella of actors, AppleJeus has been active since at least 2018 and is closely aligned in resources with TEMP.hermit, another DPRK-affiliated group under the same umbrella. The group’s primary mission is to generate and launder revenue to provide financial support to the government. AppleJeus primarily targets the cryptocurrency industry and is most notably responsible for the 3CX Supply Chain Attack. The group traditionally deploys malicious cryptocurrency software in combination with Phishing. From these compromised environments, it selectively deploys additional backdoors to enable extended operations against high-value financial targets.

Vulnerabilidades exploradas

CVEs citadas pelo MITRE ATT&CK para este grupo, com o trecho da fonte. Fichas ainda não publicadas aqui aparecem sem link.

CVE-2022-0609 Alta · 8.8 KEV Google Chromium Animation Use-After-Free Vulnerability
“3CX Supply Chain Attack: During the 3CX Supply Chain Attack, AppleJeus leveraged the Chrome vulnerability, CVE-2022-0609, in combination with a Drive-by Compromise website.”

Técnicas por tática

Acesso inicial
T1566 Phishing
Impacto
T1657 Financial Theft

© The MITRE Corporation. Conteúdo do ATT&CK® reproduzido e distribuído com permissão da MITRE Corporation. Descrições em inglês, como na fonte.