Opening Forensia workspaceacquiring
Loading the current evidence view. Navigation and account controls remain available.
Loading recent evidenceacquiring
Threat actors
Loading the current evidence view. Navigation and account controls remain available.
56
techniques
4
software
11,762
corpus matches
profile
TeamTNT is a threat group that has primarily targeted cloud and containerized environments. The group as been active since at least October 2019 and has mainly focused its efforts on leveraging cloud and container resources to deploy cryptocurrency miners in victim environments.
techniques
56 attributed · most-instrumented first
software
4 malware & tools attributed
MimiPenguin
S0179
LaZagne
S0349
Hildegard
S0601
Peirates
S0683
read this carefully
11,762 corpus matches is not attribution
That count is indicators which exhibit techniques TeamTNT is known to use. Many unrelated operators use the same techniques. Treat it as a shared-technique signal for hunting, never as first-party attribution to this group.
indicators exhibiting these techniques
Top by severity: each resolves to its own verdict.
+44 more techniques
showing 30 of 11,762