H3XA — Operational Evidence

TypeMalware

External ID—

First seen2026-08-14

Last seen2026-08-14

Confidence

—

[Regin](https://attack.mitre.org/software/S0019) is a malware platform that has targeted victims in a range of industries, including telecom, government, and financial institutions. Some [Regin](https://attack.mitre.org/software/S0019) timestamps date back to 2003. (Citation: Kaspersky Regin)

Labels

malware

11 recorded

Relationships

uses

to External Proxy

Technique

uses

to File Transfer Protocols

Technique

uses

to Hidden File System

Technique

uses

to Invalid Code Signature

Technique

uses

Technique

uses

to Modify Registry

Technique

uses

to Network Sniffing

Technique

uses

to Non-Application Layer Protocol

Technique

uses

to NTFS File Attributes

Technique

uses

to SMB/Windows Admin Shares

Technique

uses

to Web Protocols

Technique

2 external

References

mitre-attack

S0019

Kaspersky Regin

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2018/03/08070305/Kaspersky_Lab_whitepaper_Regin_platform_eng.pdf