Início / Grupos de ameaça / TeamTNT
TeamTNT G0139
Atualizado na fonte em 31/07/2026 · Ver no MITRE ATT&CK
0
CVEs associadas
61
Técnicas
4
Malwares e ferramentas
TeamTNT is a threat group that has primarily targeted cloud and containerized environments. The group as been active since at least October 2019 and has mainly focused its efforts on leveraging cloud and container resources to deploy cryptocurrency miners in victim environments.
Vulnerabilidades exploradas
CVEs citadas pelo MITRE ATT&CK para este grupo, com o trecho da fonte. Fichas ainda não publicadas aqui aparecem sem link.
O ATT&CK não cita CVEs para este grupo.
Técnicas por tática
Reconhecimento
T1595.001 Scanning IP BlocksT1595.002 Vulnerability Scanning Desenvolvimento de recursos
T1583.001 DomainsT1587.001 MalwareT1608.001 Upload Malware Acesso inicial
T1133 External Remote Services Execução
T1059.001 PowerShellT1059.003 Windows Command ShellT1059.004 Unix ShellT1059.009 Cloud APIT1059.013 Container CLI/APIT1204.003 Malicious ImageT1569.003 SystemctlT1609 Container Administration CommandT1610 Deploy Container Persistência
T1098.004 SSH Authorized KeysT1133 External Remote ServicesT1136.001 Local AccountT1543.002 Systemd ServiceT1543.003 Windows ServiceT1547.001 Registry Run Keys / Startup Folder Escalada de privilégios
T1098.004 SSH Authorized KeysT1543.002 Systemd ServiceT1543.003 Windows ServiceT1547.001 Registry Run Keys / Startup FolderT1611 Escape to Host Furtividade
T1014 RootkitT1027.002 Software PackingT1027.013 Encrypted/Encoded FileT1036 MasqueradingT1036.005 Match Legitimate Resource Name or LocationT1070.003 Clear Command HistoryT1070.004 File DeletionT1140 Deobfuscate/Decode Files or Information Comprometimento de defesas
T1222.002 Linux and Mac PermissionsT1685 Disable or Modify ToolsT1685.006 Clear Linux or Mac System LogsT1686 Disable or Modify System Firewall Acesso a credenciais
T1552.001 Credentials In FilesT1552.004 Private KeysT1552.005 Cloud Instance Metadata API Descoberta
T1007 System Service DiscoveryT1016 System Network Configuration DiscoveryT1046 Network Service DiscoveryT1049 System Network Connections DiscoveryT1057 Process DiscoveryT1082 System Information DiscoveryT1083 File and Directory DiscoveryT1120 Peripheral Device DiscoveryT1518.001 Security Software DiscoveryT1613 Container and Resource DiscoveryT1680 Local Storage Discovery Movimento lateral
T1021.004 SSH Coleta
T1074.001 Local Data Staging Comando e controle
T1071 Application Layer ProtocolT1071.001 Web ProtocolsT1102 Web ServiceT1105 Ingress Tool TransferT1219 Remote Access Tools Exfiltração
T1048 Exfiltration Over Alternative Protocol Impacto
T1496.001 Compute Hijacking Malwares e ferramentas
- HildegardMalwareS0601
- LaZagneFerramentaS0349
- MimiPenguinFerramentaS0179
- PeiratesFerramentaS0683
© The MITRE Corporation. Conteúdo do ATT&CK® reproduzido e distribuído com permissão da MITRE Corporation. Descrições em inglês, como na fonte.