Início / Grupos de ameaça / EXOTIC LILY
EXOTIC LILY G1011
Atualizado na fonte em 31/07/2026 · Ver no MITRE ATT&CK
1
CVEs associadas
15
Técnicas
2
Malwares e ferramentas
EXOTIC LILY is a financially motivated group that has been closely linked with Wizard Spider and the deployment of ransomware including Conti and Diavol. EXOTIC LILY may be acting as an initial access broker for other malicious actors, and has targeted a wide range of industries including IT, cybersecurity, and healthcare since at least September 2021.
Vulnerabilidades exploradas
CVEs citadas pelo MITRE ATT&CK para este grupo, com o trecho da fonte. Fichas ainda não publicadas aqui aparecem sem link.
“EXOTIC LILY has used malicious documents containing exploits for CVE-2021-40444 affecting Microsoft MSHTML.”
Técnicas por tática
Reconhecimento
T1589.002 Email AddressesT1593.001 Social MediaT1594 Search Victim-Owned WebsitesT1597 Search Closed Sources Desenvolvimento de recursos
T1583.001 DomainsT1585.001 Social Media AccountsT1585.002 Email AccountsT1608.001 Upload Malware Acesso inicial
T1566.001 Spearphishing AttachmentT1566.002 Spearphishing LinkT1566.003 Spearphishing via Service Execução
T1203 Exploitation for Client ExecutionT1204.001 Malicious LinkT1204.002 Malicious File Comando e controle
T1102 Web Service © The MITRE Corporation. Conteúdo do ATT&CK® reproduzido e distribuído com permissão da MITRE Corporation. Descrições em inglês, como na fonte.