Threat actor · G1047

Velvet Ant

UnattributedNo public state or group attribution on record

Velvet Ant is a threat actor operating since at least 2021. Velvet Ant is associated with complex persistence mechanisms, the targeting of network devices and appliances during operations, and the use of zero day exploits.

MITRE ATT&CK Techniques

T1021.002 T1036.005 T1037.004 T1040 T1047 T1049 T1055 T1059.004 T1071 T1078.003 T1083 T1090.001 T1132 T1133 T1211 T1569.002 T1570 T1571 T1573.002 T1574.001 T1685 T1686

Associated Malware

ImpacketPlugX

Full MITRE ATT&CK profile

0 recent articles mention this actor

No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.