WindTail (3afe711d-ed58-4c94-a9b6-9c847e1e8a2f)
WindTail is a macOS surveillance implant used by Windshift. WindTail shares code similarities with Hack Back aka KitM OSX.[SANS Windshift August 2018][objective-see windtail1 dec 2018][objective-see windtail2 jan 2019]
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Windshift (4e880d01-313a-4926-8470-78c48824aa82) | Tidal Groups | WindTail (3afe711d-ed58-4c94-a9b6-9c847e1e8a2f) | Tidal Software | 1 |