Automation · API / MCP 中文

Group profile · G0088

TEMP.Veles

TEMP.Veles is a Russia-based threat group that has targeted critical infrastructure. The group has been observed utilizing TRITON, a malware framework designed to manipulate industrial safety systems.

ATT&CK G0088 Confidence High · 100 Source src_mitre_attck_enterprise Status active

TEMP.Veles is a Russia-based threat group that has targeted critical infrastructure. The group has been observed utilizing TRITON, a malware framework designed to manipulate industrial safety systems.123

  1. FireEye TRITON 2019
  2. FireEye TEMP.Veles 2018
  3. FireEye TEMP.Veles JSON April 2019

Claims and citations

Every claim comes from a writer; provenance is the writer's assertion, not a review verdict from this directory. Validity reads by citation year.

predicateobjectValidConf.Evidence
also_known_asTEMP.Veles— → …100src_mitre_attck_enterprise
also_known_asXENOTIME— → …100src_mitre_attck_enterprise

Technique use

No technique use yet; ATT&CK sync fills it by citation year.

Aliases

TEMP.Veles · XENOTIME

Reading and review

Records are auto-ingested and not human-reviewed. Confidence is the writer's 0–100 value; bands split at ≥80 / 50–79 / <50 into high / medium / low. The four trust axes (synthetic, lifecycle, band, source count) stay separate and never merge into one score.

Corrections