Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
Threat Actors
Excerpt
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=ff940eeb-a58a-41f6-93ca-8f61eb3abe46 Threat Group Cards: A Threat Actor Encyclopedia Archived: 2026-10-20 02:02:06 UTC Home > List all groups > List all tools > List all groups using tool Emissary Tool: Emissary Names Emissary Category Malware Type Backdoor (Palo Alto) This Trojan is related to the Elise backdoor described in the Operation Lotus Blossom report. Both Emissary and Elise are part of a malware group referred to as…
Read the original report →Diamond Model
Adversary(6)
Infrastructure(2)
Capability
Victim
Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| URL | https://malpedia.caad.fkie.fraunhofer.de/details/win.emissary | High | Score 67/100 | First seen |
| URL | https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=ff940eeb-a58a-41f6-93ca-8f61eb3abe46 | High | Score 67/100 | First seen |
IOC Relationship Graph
Building graph…