spwebmember

MITRE ATT&CK: S0227 View on attack.mitre.org

Aliases: spwebmember

First seen
2019-06-15 00:00:00
Malware type
spyware
Operating systems
windows
Profile updated
2026-07-07 12:39:47

Targeted industries: government-and-public-sector professional-services technology-and-telecommunications

Context

spwebmember is a Microsoft SharePoint enumeration and data dumping tool written in .NET.

Malware & tools used

  • Sharepoint (attack-pattern)

Used by threat actors

Reports & references

  • research.nccgroup.com — Apt15 Is Alive And Strong An Analysis Of Royalcli And Royaldns (report)
  • MITRE ATT&CK — S0227 (report)

External references