Threat actor · G1047

Velvet Ant

Velvet Ant is a threat actor operating since at least 2021. Velvet Ant is associated with complex persistence mechanisms, the targeting of network devices and appliances during operations, and the use of zero day exploits.

ATT&CK techniques

22 mapped

T1021.002 T1036.005 T1037.004 T1040 T1047 T1049 T1055 T1059.004 T1071 T1078.003 T1083 T1090.001 T1132 T1133 T1211 T1569.002 T1570 T1571 T1573.002 T1574.001 T1685 T1686