Level (bce485ad-7d4f-45b6-b3c1-218f2f757611)
According to joint Cybersecurity Advisory AA23-320A (November 2023), Level is a publicly available, legitimate tool that "enables remote monitoring and management of systems". According to the Advisory, Scattered Spider threat actors are known to abuse the tool during their intrusions.[U.S. CISA Scattered Spider November 16 2023]
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Scattered Spider (3d77fb6c-cfb4-5563-b0be-7aa1ad535337) | Tidal Groups | Level (bce485ad-7d4f-45b6-b3c1-218f2f757611) | Tidal Software | 1 |