Equation
Equation is a sophisticated threat group that employs multiple remote access tools. The group is known to use zero-day exploits and has developed the capability to overwrite the firmware of hard disk drives.
Properties
- Last source
- MITRE ATT&CK
- STIX ID
- intrusion-set--96e239be-ad99-49eb-b127-3007b8c1bec9
- In Signal since
- initial import (Sep 2026)
- Retrieved at
- 2026-11-01T12:34:02+00:00
- Type
- intrusion-set
MITRE ATT&CK Techniques (4)
Adversaries may modify component firmware to persist on systems. Some adversaries may employ sophisticated means to compromise computer components and
Adversaries may environmentally key payloads or other features of malware to evade defenses and constraint execution to a specific target environment.
Adversaries may use a hidden file system to conceal malicious activity from users and security tools. File systems provide a structure to store and ac
Adversaries may attempt to gather information about attached peripheral devices and components connected to a computer system.(Citation: Peripheral Di
Explore this actor's full graph with Ninja Signal