Meta tags:

Headings (most frequently used words):

nkabuse, techniques, used, references, enterprise, layer,

Text of the page (most frequently used words):
enterprise (14), #nkabuse (14), att (11), all (10), the (9), and (8), ics (5), mobile (5), none (5), malware (5), mitre (4), software (4), data (4), techniques (4), nkn (4), 2024 (4), for (4), discovery (4), network (4), version (4), cti (3), defenses (3), new (3), february (3), victim (3), system (3), 2026 (2), corporation (2), are (2), use (2), domains (2), resources (2), reference (2), campaigns (2), groups (2), components (2), analytics (2), detection (2), strategies (2), assets (2), mitigations (2), tactics (2), matrices (2), core (2), objects (2), 2023 (2), december (2), abusing (2), protocol (2), retrieved (2), blockchain (2), machine (2), multiple (2), command (2), can (2), cron (2), job (2), linux (2), 003 (2), multi (2), proxy (2), denial (2), service (2), capabilities (2), shell (2), s1107 (2), with (2), ckcon (2), person (2), tickets (2), faq (2), 2015, registered, trademarks, cookie, preferences, website, changelog, privacy, policy, terms, contact, reset, filters, sub, kaspersky, gert, unveiling, multiplatform, threat, bill, toulas, abuses, stealthy, comms, references, utilizes, external, services, such, identify, address, ifconfig, internet, connection, configuration, 001, t1016, conducts, checks, includes, these, subsequent, heartbeat, messages, control, server, information, t1082, take, screenshots, screen, capture, t1113, uses, establish, persistence, when, infecting, hosts, scheduled, task, t1053, has, abused, public, its, communications, hop, t1090, will, check, systems, ensure, only, one, copy, running, process, t1057, enables, types, across, several, protocols, post, installation, t1498, initially, installed, executed, through, initial, script, unix, scripting, interpreter, 004, t1059, name, domain, used, view, download, layer, navigator, layers, live, permalink, april, last, modified, created, macos, windows, platforms, type, based, platform, kind, technology, exchange, between, peers, functioning, potent, implant, equipped, both, flooder, backdoor, home, open, join, october, mclean, hotel, location, details, found, register, here, search, blog, contribute, benefactors, legal, branding, updates, history, engage, tools, advisory, council, learn, more, about, get, started, detections,

Text of the page (random words):
nkabuse software s1107 mitre att ck matrices enterprise mobile ics tactics enterprise mobile ics techniques enterprise mobile ics defenses mitigations enterprise mobile ics assets detections detection strategies analytics data components cti groups software campaigns resources get started learn more about att ck att ck advisory council att ckcon att ck data tools faq engage with att ck version history updates legal branding benefactors contribute blog search att ckcon 7 0 in person tickets are open join us october 27 28 2026 in mclean va register here for in person tickets hotel and location details can be found in the faq home software nkabuse nkabuse nkabuse is a go based multi platform malware abusing nkn new kind of network technology for data exchange between peers functioning as a potent implant and equipped with both flooder and backdoor capabilities 1 2 id s1107 ⓘ type malware ⓘ platforms linux macos windows version 1 0 created 08 february 2024 last modified 13 april 2024 version permalink live version att ck navigator layers enterprise layer download view techniques used domain id name use enterprise t1059 004 command and scripting interpreter unix shell nkabuse is initially installed and executed through an initial shell script 2 enterprise t1498 network denial of service nkabuse enables multiple types of network denial of service capabilities across several protocols post installation 2 enterprise t1057 process discovery nkabuse will check victim systems to ensure only one copy of the malware is running 2 enterprise t1090 003 proxy multi hop proxy nkabuse has abused the nkn public blockchain protocol for its c2 communications 1 2 enterprise t1053 003 scheduled task job cron nkabuse uses a cron job to establish persistence when infecting linux hosts 2 enterprise t1113 screen capture nkabuse can take screenshots of the victim machine 2 enterprise t1082 system information discovery nkabuse conducts multiple system checks and includes these in subsequent heartbeat messages to the malware s command and control server 2 enterprise t1016 001 system network configuration discovery internet connection discovery nkabuse utilizes external services such as ifconfig me to identify the victim machine s ip address 2 references bill toulas 2023 december 14 new nkabuse malware abuses nkn blockchain for stealthy comms retrieved february 8 2024 kaspersky gert 2023 december 14 unveiling nkabuse a new multiplatform threat abusing the nkn protocol retrieved february 8 2024 core objects all core att ck objects all none matrices tactics techniques sub techniques defenses all defenses all none mitigations assets detection strategies analytics data components cti all cti all none groups software campaigns reference all reference all none resources domains all domains all none enterprise mobile ics reset filters contact us terms of use privacy policy website changelog cookie preferences 2015 2026 the mitre corporation mitre att ck and att ck are registered trademarks of the mitre corporation