T1199 - Trusted Relationship - MITRE ATT&CK

Threat entity extracted from intelligence sources

Frequency
9
occurrences
First Seen
November 17, 2025
Last Seen
July 29, 2026

T1199 - Trusted Relationship is a mitre_attack tracked by ThreatCluster, appearing in 9 threat clusters built from 9 intelligence report mentions.

T1199 - Trusted Relationship is a mitre_attack tracked across 9 threat clusters and 9 intelligence report mentions on ThreatCluster. First observed November 17, 2025; most recent activity July 29, 2026.

Related Threat Clusters

Recent Intelligence Reports

  • A little-known npm package was North Korea’s warm — Cyberscoop · July 29, 2026
  • Amazon identifies North Korean hacker group behind open — Aws.Amazon · July 29, 2026
  • MITRE ATT&CK T1199 — attack.mitre.org · July 20, 2026
  • Patient data exposed in AdaptHealth (AHCO) material cybersecurity incident — Stocktitan · July 2, 2026
  • Oncology Institute Data Breach 2026: Third — Rescana · May 26, 2026
  • GTA 6 Rockstar Data Breach: Rockstar Games Confirms Limited Data Exposure ... — Sundayguardianlive · April 12, 2026
  • OAuth Attacks in Entra ID Can Leverage ChatGPT to Compromise User Email Accounts — Cybersecuritynews · February 25, 2026
  • Inside Mustang Panda's Arsenal: How China's Elite Hackers Refined Their Most Persistent Malware — Webpronews · January 29, 2026

Frequently asked questions

What is T1199 - Trusted Relationship?

T1199 - Trusted Relationship is a mitre_attack tracked by ThreatCluster, appearing in 9 threat clusters built from 9 intelligence report mentions.

Is T1199 - Trusted Relationship still active?

The most recent intelligence report mentioning T1199 - Trusted Relationship on ThreatCluster is dated July 29, 2026. Activity was first observed November 17, 2025, giving a tracked span from then to July 29, 2026.

What is T1199 - Trusted Relationship associated with?

Across ThreatCluster reporting, T1199 - Trusted Relationship most frequently co-occurs with Alluring Pisces, Apt28, Apt29, BlueNoroff, Bronze President, among 12 tracked related entities.

What are the latest developments involving T1199 - Trusted Relationship?

The most significant recent cluster is “North Korean Hackers Target Open Source Software Libraries” (2 articles · Updated July 29, 2026). T1199 - Trusted Relationship appears across 9 threat clusters in total, listed above with sources.

How much reporting does ThreatCluster have on T1199 - Trusted Relationship?

T1199 - Trusted Relationship appears in 9 intelligence report mentions across 9 deduplicated threat clusters, aggregated from 17,000+ monitored sources.

CVSS v3.1 Breakdown