SPACESHIP (0f8d0a73-9cd3-475a-b31b-d457278c921a)
SPACESHIP is malware developed by APT30 that allows propagation and exfiltration of data over removable devices. APT30 may use this capability to exfiltrate data across air-gaps. [FireEye APT30]
Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
---|---|---|---|---|
APT30 (be45ff95-6c74-4000-bc39-63044673d82f) | Tidal Groups | SPACESHIP (0f8d0a73-9cd3-475a-b31b-d457278c921a) | Tidal Software | 1 |