threat actor USES exfiltration
The threat actor targeted R&D systems and exfiltrated intellectual property.
Explicit Confidence 99% · Andrew EP 11 Details
“They were looking to exfiltrate and they did exfiltrate some intellectual property.”
Technique
technique:exfiltration
Also: exfil, exfiltrate, file exfiltration
Unauthorized removal of data from the client environment, including intellectual property.
Unauthorized removal of data from the client environment, including intellectual property.
“They were looking to exfiltrate and they did exfiltrate some intellectual property.”
“attempts at theft and intellectual property”
Removal of data from a compromised environment, listed as a possible stage of the tester’s methodology.
“exfiltration, and persistence may be in there”
Unauthorized copying of files that remain in the victim’s storage but were not intended for public consumption.
“They exfiltrated files that were not meant for public consumption but weren’t very well protected.”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | USES | threat actor | Explicit | 11 |
| incoming | USES | Tinker Secor | Explicit | 36 |
| incoming | USES | Professor Dubstep | Attributed | 148 |
threat actor USES exfiltration
The threat actor targeted R&D systems and exfiltrated intellectual property.
Explicit Confidence 99% · Andrew EP 11 Details
“They were looking to exfiltrate and they did exfiltrate some intellectual property.”
Tinker Secor USES exfiltration
Tinker lists exfiltration as a possible phase of his penetration-testing methodology.
Explicit Confidence 95% · Tinker Secor EP 36 Details
“exfiltration, and persistence may be in there if you need to”
Professor Dubstep USES exfiltration
Jack characterizes the group’s downloading of files that were not intended for public consumption as exfiltration rather than conventional theft.
Attributed Confidence 98% · Jack Rhysider EP 148 Details
“They exfiltrated files that were not meant for public consumption but weren’t very well protected.”