Technique
technique:network_scanning
Also: IP-range scanning, NetBIOS scanning, network discovery, reconnaissance, scan and navigate across the network
Scanning and navigation across the compromised bank network to identify systems and move through the environment.
Scanning and navigation across the compromised bank network to identify systems and move through the environment.
“used to scan and navigate across the network”
Scanning IP ranges and open ports to locate point-of-sale systems and exposed remote-access services.
“I’m gonna scan that whole range.”
“used the Nmap or something to scan and find out what open ports were there.”
Scanning of public IP ranges to identify potentially reachable shared network resources.
“those public IP ranges in that batch file that were scanned”
Discovery activity in which the devices probe local networks and connected systems.
“they’re doing that discovery when they get on a network to see what’s on the network”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | INVOLVES | Bangladesh Bank heist | Explicit | 72 |
| incoming | USES | Cameron Harrison | Explicit | 85 |
| incoming | INVOLVES | Cloud Hopper | Explicit | 103 |
| incoming | USES | SuperBox | Explicit | 172 |
Bangladesh Bank heist INVOLVES network scanning
The attackers used software to scan and navigate across Bangladesh Bank's network.
Explicit Confidence 98% · Geoff White EP 72 Details
“the third piece of software was used to scan and navigate across the network”
Cameron Harrison USES network scanning
Cam scanned IP ranges and local networks to locate systems associated with small businesses and point-of-sale systems.
Explicit Confidence 99% · Cameron Harrison EP 85 Details
“now that IP; I’m gonna scan that whole range.”
Cloud Hopper INVOLVES network scanning
The attackers scanned public IP ranges, including ranges belonging to the US Department of Defense, for shared network drives.
Explicit Confidence 99% · Fabio Viggiani EP 103 Details
“nineteen of those public IP ranges belonged to the US Department of Defense”
SuperBox USES network scanning
The SuperBox actively scanned and probed other devices on the local network.
Explicit Confidence 99% · D3ada55 EP 172 Details
“they’re doing that discovery when they get on a network to see what’s on the network.”