Cisco Talos published IOCs ↗
- Evidence class
- provider reported
- Source family label
- Crimson - S0115
- Source confidence
- Not reported
- Observed
- 2022-09-14 20:04 UTC
- Retrieved
- 2026-10-08 03:31 UTC
Crimson - S0115
Name of ATT&CK software | [Crimson](https://attack.mitre.org/software/S0115) is a remote access Trojan that has been used by [Transparent Tribe](https://attack.mitre.org/groups/G0134) since at least 2016.(Citation: Proofpoint Operation Transparent Tribe March 2016)(Citation: Kaspersky Transparent Tribe August 2020)
Reference details
- Primary displayed family label
- Crimson - S0115
- Source context
2022/07/transparent-tribe-targets-education.json- First reported
- 2022-09-14 20:04 UTC
- Last reported
- 2022-09-14 20:04 UTC
- Catalog updated
- 2026-10-08 03:31 UTC
Source family labels
Tags
Published indicators
Network addresses are displayed in defanged form.
No file hashes or network indicators were published in this record.