Campaign · all campaigns
Pikabot Distribution February 2024C0036 unknown
aka Pikabot Distribution February 2024
Last updated: 2026-08-20
0attributed CVEs
6ATT&CK techniques
0.0IDF score (tooling uniqueness)
0exclusive CVEs
—years active
About this actor
[Pikabot](https://attack.mitre.org/software/S1145) was distributed in [Pikabot Distribution February 2024](https://attack.mitre.org/campaigns/C0036) using malicious emails with embedded links leading to malicious ZIP archives requiring user interaction for follow-on infection. The version of [Pikabot](https://attack.mitre.org/software/S1145) distributed featured significant changes over the 2023 variant, including reduced code complexity and simplified obfuscation mechanisms.(Citation: Elastic Pikabot 2024)(Citation: Zscaler Pikabot 2024)
Source: MITRE ATT&CK
How we know this
- Data origin
- MITRE ATT&CK campaign Imported from the MITRE ATT&CK STIX bundle as a campaign object.
- Techniques
- MITRE ATT&CK STIX mappings — 6 ATT&CK techniques on file.
- Named victims
- None on file.
See how actor data is built for the full pipeline.
Activity timeline
No activity events recorded.
Profile
| CVE | Risk | CVSS | EPSS | Published | Products |
|---|---|---|---|---|---|
| No attributed CVEs. | |||||
Mitigating controls (NIST 800-53)
| Control | Techniques covered | Coverage |
|---|---|---|
CM-2 | 6 / 6 | 100% |
CM-6 | 6 / 6 | 100% |
SI-3 | 6 / 6 | 100% |
SI-4 | 6 / 6 | 100% |
CA-7 | 5 / 6 | 83% |
RA-5 | 5 / 6 | 83% |
AC-2 | 4 / 6 | 67% |
AC-3 | 4 / 6 | 67% |
AC-6 | 4 / 6 | 67% |
CM-8 | 4 / 6 | 67% |
IA-9 | 4 / 6 | 67% |
SI-10 | 4 / 6 | 67% |
SI-2 | 4 / 6 | 67% |
SI-7 | 4 / 6 | 67% |
AC-17 | 3 / 6 | 50% |
Co-occurring actors
None.
Similar actors
Similar TTPs
- TA577 0.31
- TA459 0.27
- Evilnum 0.25
- Gallmaker 0.21
- Nomadic Octopus 0.21