APT1
First Light
Their own tradecraft costs ~30% less intel to field.
Phishing PayloadBotnet NodeAPT Implant
Red team
Infiltrate
Flip the board. The network is already built and it reinforces after every wave, so you have twelve attempts to take the core down. Spend intel composing each intrusion, and read what the target is bad at before you commit to a shape.
Choose whose tradecraft to borrow
G0006 →
menuPass
Quiet Tenant
Their own tradecraft costs ~30% less intel to field.
TrojanVirusAPT Implant
Turla
Long Shadow
Their own tradecraft costs ~30% less intel to field.
Botnet NodeVirusTrojan
APT29
Still Water
Their own tradecraft costs ~30% less intel to field.
APT ImplantLogic BombEncrypted Tunnel
FIN7
Card Table
Their own tradecraft costs ~30% less intel to field.
VirusWorm
Wizard Spider
Spider Web
Their own tradecraft costs ~30% less intel to field.
APT ImplantWormRootkit
Sandworm Team
Black Tide
Their own tradecraft costs ~30% less intel to field.
RansomwareBotnet NodeVirus
Lazarus Group
Iron Rain
Their own tradecraft costs ~30% less intel to field.
RansomwareRootkitTrojan
Volt Typhoon
Grid Walker
Their own tradecraft costs ~30% less intel to field.
Encrypted TunnelRootkitBotnet Node
APT28
Open Season
Their own tradecraft costs ~30% less intel to field.
APT ImplantBotnet Node