T1620 - Reflective Code Loading

MITRE ATT&CK

Threat entity extracted from intelligence sources

Frequency

4

occurrences

First Seen

May 14, 2026

Last Seen

September 6, 2026

Overview

Recent Events

Relationships

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Related Clusters (5)

Operation Double Barrel: State-Sponsored Exploitation of Korean Financial Software

Jul 30·7 sources

Chinese APT Campaign Targets Asia-Pacific with FDMTP Backdoor

May 14·3 sources

New Remcos RAT Campaign Exploits CVE-2017-11882 via Phishing

May 29·2 sources

Exposed Malware Delivery Lab Reveals AI-Driven Phishing Operations

Jul 20·2 sources

Kaspersky and AFRIPOL Enhance Cybersecurity Training for African Law Enforcement

Mar 25·95 sources

Related Articles (4)

Kaspersky Operation SyncHole

securelist.com·4d ago

Inside an Exposed Malware Delivery Lab: OPSEC Failures Behind a WebDAV Phishing Operation

Deceptively Sweet: DonutLoader Reloaded in a modern Remcos RAT Infection

Feeds.Feedburner·May 29

Chinese APT Campaign Targets Entities with Updated FDMTP Backdoor

Darktrace·May 14

Related Entities

Andariel Group Lazarus Group Stealth Falcon Twill Typhoon Malware Phishing Trojan CURP Campaign Operation SyncHole Sogou Pinyin Japan South Korea