Zox — Malware Profile
Zox is a remote access tool that has been used by Axiom since at least 2008.
MITRE ATT&CK techniques (9)
- T1001.002 Steganography
- T1005 Data from Local System
- T1021.002 SMB/Windows Admin Shares
- T1027.013 Encrypted/Encoded File
- T1057 Process Discovery
- T1068 Exploitation for Privilege Escalation
- T1083 File and Directory Discovery
- T1105 Ingress Tool Transfer
- T1680 Local Storage Discovery