Threat Actor

Threat Group-1314

Also known as: Threat Group-1314, TG-1314

Threat Group-1314 is an unattributed threat group that has used compromised credentials to log into a victim's remote access infrastructure.

4
Techniques
2
Software
0
indicators on this record

Properties

Last source
MITRE ATT&CK
STIX ID
intrusion-set--d519164e-f5fa-4b8c-a1fb-cf0172ad0983
In Signal since
initial import (Sep 2026)
Retrieved at
2026-11-02T08:50:17+00:00
Type
intrusion-set

MITRE ATT&CK Techniques (4)

▸
Domain Accounts (T1078.002)

Adversaries may obtain and abuse credentials of a domain account as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense E

▸
SMB/Windows Admin Shares (T1021.002)

Adversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SM

▸
Software Deployment Tools (T1072)

Adversaries may gain access to and use centralized software suites installed within an enterprise to execute commands and move laterally through the n

▸
Windows Command Shell (T1059.003)

Adversaries may abuse the Windows command shell for execution. The Windows command shell (cmd) is the prima

Software & Tools (2)

▸
Net [tool]

The Net utility is a component of the Windows operating system. It is used in command-line operations for c

▸
PsExec [tool]

PsExec is a free Microsoft tool that can be used to execute a program on another computer. It is used by IT

Explore this actor's full graph with Ninja Signal

Threat Group-1314 — Threat Actor Profile — Ninja Signal | Ninja Signal