Campaign · all campaigns

FrankensteinC0001 unknown

aka Frankenstein

Last updated: 2026-07-03

0attributed CVEs

39ATT&CK techniques

0.0IDF score (tooling uniqueness)

0exclusive CVEs

—years active

About this actor

[Frankenstein](https://attack.mitre.org/campaigns/C0001) was described by security researchers as a highly-targeted campaign conducted by moderately sophisticated and highly resourceful threat actors in early 2019. The unidentified actors primarily relied on open source tools, including [Empire](https://attack.mitre.org/software/S0363). The campaign name refers to the actors' ability to piece together several unrelated open-source tool components.(Citation: Talos Frankenstein June 2019)

Source: MITRE ATT&CK

Activity timeline

No activity events recorded.

Profile

CVE	Risk	CVSS	EPSS	Published	Products
No attributed CVEs.

Mitigating controls (NIST 800-53)

Control	Techniques covered	Coverage
`SI-4`	26 / 39	67%
`CM-6`	23 / 39	59%
`CM-2`	22 / 39	56%
`SI-3`	21 / 39	54%
`CM-7`	16 / 39	41%
`CA-7`	15 / 39	38%
`SI-7`	13 / 39	33%
`SC-7`	12 / 39	31%
`AC-3`	11 / 39	28%
`AC-4`	11 / 39	28%
`AC-6`	11 / 39	28%
`AC-2`	10 / 39	26%
`CM-8`	10 / 39	26%
`RA-5`	10 / 39	26%
`SI-10`	10 / 39	26%

Co-occurring actors

None.