APT / THREAT GROUP

jason

2
aliases
Last seen:Mar 17, 2026

Intelligence Profile

Jason is a graphic tool implemented to perform Microsoft exchange account brute-force in order to “harvest” the highest possible emails and accounts information. Distributed in a ZIP container the interface is quite intuitive: the Microsoft exchange address and its version shall be provided. Three brute-force methods could be selected: EWS (Exchange Web Service), OAB (Offline Address Book) or both (All). Username and password list can be selected and threads number should be provided in order to optimize the attack balance.

Threat Analysis

jason is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

Intelligence Reports Mentioning jason

External References

Quick Facts

TypeAPT / Threat Group
Aliases2

Also Known As

jasonwin.jason

External Intelligence

Malpedia: win.jason

Research Links

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.
jason — APT / Threat Group | Threat Intelligence | CTIWATCH.COM