Início / Grupos de ameaça / Axiom
Axiom G0001
Também conhecido como: Group 72
Atualizado na fonte em 31/07/2026 · Ver no MITRE ATT&CK
4
CVEs associadas
20
Técnicas
8
Malwares e ferramentas
Axiom is a suspected Chinese cyber espionage group that has targeted the aerospace, defense, government, manufacturing, and media sectors since at least 2008. Some reporting suggests a degree of overlap between Axiom and Winnti Group but the two groups appear to be distinct based on differences in reporting on TTPs and targeting.
Vulnerabilidades exploradas
CVEs citadas pelo MITRE ATT&CK para este grupo, com o trecho da fonte. Fichas ainda não publicadas aqui aparecem sem link.
“Axiom has used exploits for multiple vulnerabilities including CVE-2014-0322, CVE-2012-4792, CVE-2012-1889, and CVE-2013-3893.”
“Axiom has used exploits for multiple vulnerabilities including CVE-2014-0322, CVE-2012-4792, CVE-2012-1889, and CVE-2013-3893.”
“Axiom has used exploits for multiple vulnerabilities including CVE-2014-0322, CVE-2012-4792, CVE-2012-1889, and CVE-2013-3893.”
“Axiom has used exploits for multiple vulnerabilities including CVE-2014-0322, CVE-2012-4792, CVE-2012-1889, and CVE-2013-3893.”
Técnicas por tática
Desenvolvimento de recursos
T1583.002 DNS ServerT1583.003 Virtual Private ServerT1584.005 Botnet Acesso inicial
T1078 Valid AccountsT1189 Drive-by CompromiseT1190 Exploit Public-Facing ApplicationT1566 Phishing Execução
T1203 Exploitation for Client Execution Persistência
T1078 Valid AccountsT1546.008 Accessibility Features Escalada de privilégios
T1078 Valid AccountsT1546.008 Accessibility Features Furtividade
T1078 Valid Accounts Comprometimento de defesas
T1553 Subvert Trust Controls Acesso a credenciais
T1003 OS Credential Dumping Movimento lateral
T1021.001 Remote Desktop ProtocolT1563.002 RDP Hijacking Coleta
T1005 Data from Local SystemT1560 Archive Collected Data Comando e controle
T1001.002 Steganography © The MITRE Corporation. Conteúdo do ATT&CK® reproduzido e distribuído com permissão da MITRE Corporation. Descrições em inglês, como na fonte.