T1588.001Resource Development
Malware
Adversaries may buy, steal, or download malware that can be used during targeting. Malicious software can include payloads, droppers, post-compromise tools, backdoors, packers, and C2 protocols. Adversaries may acquire malware to support their operations, obtaining a means for maintaining control of remote machines, evading defenses, and executing post-compromise behaviors. In addition to…
CVEs2
In CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it.2
Reports0
Detections
1 Sigma rule tagged T1588.001MalwareT1588.0011 general rule
- Relevant ClamAV Messagehighstable
Sigma rules © SigmaHQ, Detection Rule License 1.1; linked, not reproduced.
CVEs linked to Malware
2 CVEs, by priority. Each link shows its badge.- CVE-2023-34048VMware vCenter Server Out-of-Bounds Write VulnerabilityMITRE CTID mapping of the KEV entry · follow-on activity99.2%Top 0.06%73.7priority
- CVE-2025-04117-Zip Mark of the Web Bypass VulnerabilityMITRE CTID mapping of the KEV entry · primary impact67.1%Top 0.7%67.8priority