H3XA — Operational Evidence

TypeMalware

External ID—

First seen2026-08-14

Last seen2026-08-14

Confidence

—

[QuietSieve](https://attack.mitre.org/software/S0686) is an information stealer that has been used by [Gamaredon Group](https://attack.mitre.org/groups/G0047) since at least 2021.(Citation: Microsoft Actinium February 2022)

Labels

malware

10 recorded

Relationships

uses

from Gamaredon Group

Group

uses

to Data from Local System

Technique

uses

to File and Directory Discovery

Technique

uses

to Hidden Window

Technique

uses

to Ingress Tool Transfer

Technique

uses

to Internet Connection Discovery

Technique

uses

to Network Share Discovery

Technique

uses

to Peripheral Device Discovery

Technique

uses

to Screen Capture

Technique

uses

to Web Protocols

Technique

2 external

References

mitre-attack

S0686

open

Microsoft Actinium February 2022

https://www.microsoft.com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/

open