LOWBALL — Malware Profile

LOWBALL is malware used by admin@338. It was used in August 2015 in email messages targeting Hong Kong-based media organizations.

MITRE ATT&CK techniques (3)

• T1071.001 Web Protocols
• T1102.002 Bidirectional Communication
• T1105 Ingress Tool Transfer

Attributed threat actors

• admin@338

Read the full analysis on IntelFusions