SpicyOmelette — Malware Profile
SpicyOmelette is a JavaScript based remote access tool that has been used by Cobalt Group since at least 2018.
MITRE ATT&CK techniques (11)
- T1005 Data from Local System
- T1016 System Network Configuration Discovery
- T1018 Remote System Discovery
- T1059.007 JavaScript
- T1082 System Information Discovery
- T1105 Ingress Tool Transfer
- T1204.001 Malicious Link
- T1518 Software Discovery
- T1518.001 Security Software Discovery
- T1553.002 Code Signing
- T1566.002 Spearphishing Link