NICECURL (98b223ca-b7f9-5ed2-8348-3a4caaced031)
NICECURL is a VBScript-based backdoor used by APT42 to download additional modules.[Mandiant APT42-untangling]
Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
---|---|---|---|---|
NICECURL (98b223ca-b7f9-5ed2-8348-3a4caaced031) | Tidal Software | APT42 (c4336f3a-1902-5eb1-8ad1-204da1267dcc) | Tidal Groups | 1 |