FLASHFLOOD

FLASHFLOOD is malware developed by APT30 that allows propagation and exfiltration of data over removable devices. APT30 may use this capability to exfiltrate data across air-gaps.

View graph Watch Export

Indicators tracked

Intelligence Reports10

10 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium

Connections

7 relationships

T1560.003: Archive via Custom Method

source

T1025: Data from Removable Media

source

T1074.001: Local Data Staging

source

T1005: Data from Local System

source

T1083: File and Directory Discovery

source

T1547.001: Registry Run Keys / Startup Folder

source