T1218 - Signed Binary Proxy Execution

MITRE ATT&CK

Threat entity extracted from intelligence sources

Frequency

5

occurrences

First Seen

December 18, 2025

Last Seen

January 28, 2026

Overview

Recent Events

Relationships

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Related Clusters (4)

Amatera Infostealer Campaign Uses Fake CAPTCHA and App-V Scripts

Jan 27·2 sources

Chinese Hackers Use Fake Teams Downloads to Shift Blame to Russia

Dec 18·3 sources

HoneyMyte APT Group Targets Government Entities with Updated Stealers

Jan 27·2 sources

Cyber Threat Landscape in Finance Sector: Key Trends Identified

Jan 28·3 sources

Related Articles (5)

The State of Cybersecurity in the Finance Sector: Six Trends to Watch

Darktrace·Jan 28

The State of Cybersecurity in the Finance Sector: Six Trends to Watch

Darktrace·Jan 28

Amatera infostealer campaign leverages fake CAPTCHA and App-V scripts

Scworld·Jan 27

Kaspersky reveals new HoneyMyte APT campaigns and toolset

Kaspersky·Jan 27

Chinese hackers fake Teams downloads in false flag ploy

Securitybrief.Asia·Dec 18

Related Entities

Lazarus Void Arachne HoneyMyte Silver Fox Malware Phishing Ransomware Data Breach Steganography Amatera Infostealer Campaign HoneyMyte Campaigns ToneShell Campaign