Gazer — Malware Profile
Gazer is a backdoor used by Turla since at least 2016.
MITRE ATT&CK techniques (18)
- T1027.013 Encrypted/Encoded File
- T1033 System Owner/User Discovery
- T1053.005 Scheduled Task
- T1055 Process Injection
- T1055.003 Thread Execution Hijacking
- T1070.004 File Deletion
- T1070.006 Timestomp
- T1071.001 Web Protocols
- T1105 Ingress Tool Transfer
- T1480.002 Mutual Exclusion
- T1546.002 Screensaver
- T1547.001 Registry Run Keys / Startup Folder
- T1547.004 Winlogon Helper DLL
- T1547.009 Shortcut Modification
- T1553.002 Code Signing
- T1564.004 NTFS File Attributes
- T1573.001 Symmetric Cryptography
- T1573.002 Asymmetric Cryptography