Loading malware…
1 distinct threat actor Mallory has associated with this family across public reporting. Open in Mallory to see the full evidence chain and overlapping campaigns.
A newly identified utility dubbed FJORDOHELPER can update FOCUSFJORD configurations and completely remove FOCUSFJORD from the system.
3 distinct techniques documented for this family, organized by ATT&CK tactic.
"related services and registry keys used for persistence"; MITRE list includes T1543.003.
"related services and registry keys used for persistence"; MITRE list includes T1543.003.
"consistent effort to delete these tools and remove any residual forensic artifacts"; "deleted tools... after use"
MITRE ATT&CK Techniques list includes "T1105 Ingress Tool Transfer"; described delivery of tools and payloads post-access.
1 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.