Water Pamola
Water Pamola is a cybercrime syndicate with a financial motive, tracked by Brandefense. It targets the Retail and Consumer sector in Australia and Japan. It uses 9 MITRE ATT&CK techniques.
- Techniques
- 9
- Exploited CVEs
- No CVE data
- First seen
- Apr 28, 2021
- Last seen
- Apr 28, 2021
- Record updated
Who They Target.
Sectors · 1
Countries · 2
How They Operate · MITRE ATT&CK.
9 techniques across 4 of 14 tacticsReconnaissance·
Resource Development·
Initial Access3
T1190
Exploit Public-Facing Application
Exploit Public-Facing Application
T1505.003
Server Software Component: Web Shell
Server Software Component: Web Shell
T1566.001
Phishing: Spearphishing Attachment
Phishing: Spearphishing Attachment
Execution4
T1053.005
Scheduled Task/Job: Scheduled Task
Scheduled Task/Job: Scheduled Task
T1055
Process Injection
Process Injection
T1059.007
Command and Scripting Interpreter: JavaScript
Command and Scripting Interpreter: JavaScript
T1574.002
Hijack Execution Flow: DLL Side-Loading
Hijack Execution Flow: DLL Side-Loading
Persistence1
T1547.001
Boot or Logon Autostart Execution: Registry Run Keys / Startup Folder
Boot or Logon Autostart Execution: Registry Run Keys / Startup Folder
Privilege Escalation·
Defense Evasion·
Credential Access1
T1056.002
Input Capture: GUI Input Capture
Input Capture: GUI Input Capture
Discovery·
Lateral Movement·
Collection·
Command and Control·
Exfiltration·
Impact·
Vulnerabilities Linked To Their Tools.
Browse Vulnerability Intelligence →Arsenal · Malware And Tools.
- Farflimalware
- XSS.MEtool
Campaigns.
- Water PamolaApr 2021
About Water Pamola.
A financially motivated threat group that targets online merchants and e-commerce platforms to steal payment card data and customer personal information through web injection and social engineering.
Last updated Oct 19, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.