2 distinct threat actors attributed by public researchers. Open in Mallory to see the full evidence chain and overlapping campaigns.
Credential Harvesting via the tool DRINKING TEA: This tool sniffed SSH, Telnet, and Rlogin passwords used by university IT administrators, granting NSA full access to internal systems.
Credential Harvesting via the tool DRINKING TEA: This tool sniffed SSH, Telnet, and Rlogin passwords used by university IT administrators, granting NSA full access to internal systems.
1 distinct technique documented for this family, organized by ATT&CK tactic.
Credential Harvesting via the tool DRINKING TEA: This tool sniffed SSH, Telnet, and Rlogin passwords used by university IT administrators ... NSA allegedly used this to capture command-line logs, passwords generated by University staff during their operation and maintenance work.
Credential Harvesting via the tool DRINKING TEA: This tool sniffed SSH, Telnet, and Rlogin passwords used by university IT administrators ... NSA allegedly used this to capture command-line logs, passwords generated by University staff during their operation and maintenance work.
1 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.