Threat actor · G1020

Mustard Tempest

DEV-0206TA569GOLD PRELUDEUNC1543

UnattributedNo public state or group attribution on record

Mustard Tempest is an initial access broker that has operated the SocGholish distribution network since at least 2017. Mustard Tempest has partnered with Indrik Spider to provide access for the download of additional malware including LockBit, WastedLocker, and remote access tools.

MITRE ATT&CK Techniques

T1036.005 T1082 T1105 T1189 T1204.001 T1566.002 T1583.004 T1583.008 T1584.001 T1608.001 T1608.004 T1608.006

Associated Malware

Cobalt StrikeSocGholish

Full MITRE ATT&CK profile

0 recent articles mention this actor

No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.