Naikon has used a netbios scanner for remote machine identification.(Citation: Bitdefender Naikon April 2021)|
|mitre-attack|enterprise-attack|Windows|T1047|Windows Management Instrumentation|

Naikon has used WMIC.exe for lateral movement.(Citation: Bitdefender Naikon April 2021)|
|mitre-attack|enterprise-attack|Windows|T1053.005|Scheduled Task|

Naikon has used schtasks.exe for lateral movement in compromised networks.(Citation: Bitdefender Naikon April 2021)|
|mitre-attack|enterprise-attack|Linux,macOS,Windows|T1078.002|Domain Accounts|

Naikon has used administrator credentials for lateral movement in compromised networks.(Citation: Bitdefender Naikon April 2021)|
|mitre-attack|enterprise-attack|macOS,Windows,Linux|T1566.001|Spearphishing Attachment|

Naikon has used malicious e-mail attachments to deliver malware.(Citation: CheckPoint Naikon May 2020)|
|mitre-attack|enterprise-attack|Linux,macOS,Windows|T1204.002|Malicious File|

Naikon has convinced victims to open malicious attachments to execute malware.(Citation: CheckPoint Naikon May 2020)|
|mitre-attack|enterprise-attack|Windows,Office 365|T1137.006|Add-ins|

Naikon has used the RoyalRoad exploit builder to drop a second stage loader, intel.wll, into the Word Startup folder on the compromised host.(Citation: CheckPoint Naikon May 2020)|
|mitre-attack|enterprise-attack|Windows|T1574.002|DLL Side-Loading|

Naikon has used DLL side-loading to load malicious DLL's into legitimate executables.(Citation: CheckPoint Naikon May 2020)|
|mitre-attack|enterprise-attack|Windows,Azure AD,Office 365,SaaS,IaaS,Linux,macOS,Google Workspace|T1518.001|Security Software Discovery|

Naikon uses commands such as

Naikon uses commands such as