← All Threat Actors
Threat Actor Profile

Leafminer

Flash Kitten G0077 Raspite
▲ High Threat
[Leafminer](https://attack.mitre.org/groups/G0077) is an Iranian threat group that has targeted government organizations and business entities in the Middle East since at least early 2017. (Citation: Symantec Leafminer July 2018)
Origin

Known TTPs

Command Obfuscation
Tool
LSASS Memory
Credentials from Password Stores
Network Service Discovery
Cached Domain Credentials
Credentials from Web Browsers
Credentials In Files
LSA Secrets
Process Doppelgänging
Drive-by Compromise
Remote System Discovery
Password Spraying
Local Account
JavaScript
Remote Email Collection
File and Directory Discovery

External Resources

CISA Advisories ↗

Related Intelligence

Hacking the mainframe…

LINK COPIED TO CLIPBOARD