Início / Grupos de ameaça / Confucius
Confucius G0142
Também conhecido como: Confucius APT
Atualizado na fonte em 31/07/2026 · Ver no MITRE ATT&CK
3
CVEs associadas
22
Técnicas
1
Malwares e ferramentas
Confucius is a cyber espionage group that has primarily targeted military personnel, high-profile personalities, business persons, and government organizations in South Asia since at least 2013. Security researchers have noted similarities between Confucius and Patchwork, particularly in their respective custom malware code and targets.
Vulnerabilidades exploradas
CVEs citadas pelo MITRE ATT&CK para este grupo, com o trecho da fonte. Fichas ainda não publicadas aqui aparecem sem link.
“Confucius has exploited Microsoft Office vulnerabilities, including CVE-2015-1641, CVE-2017-11882, and CVE-2018-0802.”
“Confucius has exploited Microsoft Office vulnerabilities, including CVE-2015-1641, CVE-2017-11882, and CVE-2018-0802.”
“Confucius has exploited Microsoft Office vulnerabilities, including CVE-2015-1641, CVE-2017-11882, and CVE-2018-0802.”
Técnicas por tática
Desenvolvimento de recursos
T1583.006 Web Services Acesso inicial
T1566.001 Spearphishing AttachmentT1566.002 Spearphishing Link Execução
T1053.005 Scheduled TaskT1059.001 PowerShellT1059.005 Visual BasicT1203 Exploitation for Client ExecutionT1204.001 Malicious LinkT1204.002 Malicious File Persistência
T1053.005 Scheduled TaskT1547.001 Registry Run Keys / Startup Folder Escalada de privilégios
T1053.005 Scheduled TaskT1547.001 Registry Run Keys / Startup Folder Furtividade
T1218.005 MshtaT1221 Template Injection Descoberta
T1083 File and Directory DiscoveryT1680 Local Storage Discovery Coleta
T1119 Automated Collection Comando e controle
T1071.001 Web ProtocolsT1105 Ingress Tool Transfer Exfiltração
T1041 Exfiltration Over C2 ChannelT1567.002 Exfiltration to Cloud Storage Malwares e ferramentas
- WarzoneRATMalwareS0670
© The MITRE Corporation. Conteúdo do ATT&CK® reproduzido e distribuído com permissão da MITRE Corporation. Descrições em inglês, como na fonte.