malware

Cryptoistic

S0498 · ATT&CK v19.2

Platforms

macOS

Tracked actors

Description

[Cryptoistic](https://attack.mitre.org/software/S0498) is a backdoor, written in Swift, that has been used by [Lazarus Group](https://attack.mitre.org/groups/G0032).(Citation: SentinelOne Lazarus macOS July 2020)

Actors that use this

1 tracked actor

Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroffATT&CK-attributed