GLOOXMAIL — Malware Profile

GLOOXMAIL is malware used by APT1 that mimics legitimate Jabber/XMPP traffic.

MITRE ATT&CK techniques (2)

• T1071.005 Publish/Subscribe Protocols
• T1102.002 Bidirectional Communication

Attributed threat actors

• APT1

Read the full analysis on IntelFusions