misp-galaxy:microsoft-activity-group="STRONTIUM",misp-galaxy:mitre-enterprise-attack-intrusion-set="APT28",misp-galaxy:mitre-enterprise-attack-intrusion-set="APT28 - G0007",misp-galaxy:mitre-enterprise-attack-relationship="APT28 (G0007) uses XTunnel (S0117)",misp-galaxy:mitre-enterprise-attack-relationship="APT28 uses XTunnel",misp-galaxy:mitre-intrusion-set="APT28",misp-galaxy:mitre-intrusion-set="APT28 - G0007",misp-galaxy:mitre-mobile-attack-intrusion-set="APT28",misp-galaxy:mitre-mobile-attack-intrusion-set="APT28 - G0007",misp-galaxy:mitre-enterprise-attack-malware="XTunnel",misp-galaxy:mitre-enterprise-attack-malware="XTunnel - S0117",misp-galaxy:mitre-malware="XTunnel",ecsirt:intrusions="backdoor",veris:action:malware:variety="Backdoor",ms-caro-malware:malware-type="Backdoor",ms-caro-malware-full:malware-type="Backdoor",type:OSINT,osint:lifetime="perpetual",osint:certainty="50",tlp:white,osint:source-type="microblog-post",misp-galaxy:threat-actor="Sofacy"