ATT&CK

Threat actorsMITRE ATT&CK intrusion sets Malware & toolsSoftware families & tooling TechniquesTactics & techniques

ReportsPublished APT reporting SourcesEvery feed behind the archive

Developers

JSON APIFree CORS-enabled endpoints MCP serverModel Context Protocol access Source codeThis project on GitHub

Loading the archive…

Open Threat Intel Archive

Indicators are treated as facts and kept with their source_vendor, source URL, and dates; every feed is credited and redistribution-restricted feeds are flagged, not dropped. ATT&CK content is © MITRE, used under its terms. See NOTICE. The archive reports intelligence; it does not editorialize threat.

Indicators Actors Sources API GitHub

Open Threat Intel Archive

← Malware & tools

S0281malware

Dok

a.k.a. Retefe

Dok is a Trojan application disguised as a.zip file that is able to collect user credentials and install a malicious proxy server to redirect a user's network traffic (i.e. Adversary-in-the-Middle).

Platforms: macOS

MITRE ATT&CK ↗

Linked entities · 11

usesT1557Adversary-in-the-Middle usesT1027.002Software Packing usesT1543.001Launch Agent usesT1059.002AppleScript usesT1222.002Linux and Mac Permissions usesT1048.003Exfiltration Over Unencrypted Non…usesT1553.004Install Root Certificate usesT1548.003Sudo and Sudo Caching usesT1056.002GUI Input Capture usesT1090.003Multi-hop Proxy usesT1547.015Login Items