Threat Group-1314

MITRE ATT&CK: G0028 View on attack.mitre.org

Aliases: TG-1314, Threat Group-1314

First seen
2020-05-01 00:00:00
Primary motivation
espionage
Sophistication
intermediate
Resource level
organization
Actor type
unknown
Profile updated
2026-07-07 12:30:12

Targeted industries: financial-services technology-and-telecommunications

Context

Threat Group-1314 is an unattributed threat group that has used compromised credentials to log into a victim's remote access infrastructure.

Detection coverage

  • 72 Sigma rules

Malware & tools used

  • SMB/Windows Admin Shares (attack-pattern)
  • Windows Command Shell (attack-pattern)
  • Software Deployment Tools (attack-pattern)
  • Domain Accounts (attack-pattern)
  • Net (malware)
  • PsExec (malware)

Reports & references

  • MITRE ATT&CK — G0028 (report)
  • web.archive.org — Living Off The Land (report)

External references