Gold Open Source
ExplorePackagesVulnerabilitiesCWEsMCP ServersScan
Login
Gold Open Source

The authoritative source for production-ready open-source components. Every package, container image, AI model, and MCP server undergoes rigorous verification for security, malware, and license compliance.

Explore Gold

  • Explore Everything
  • Packages
  • Gold Certified Packages
  • Container Images
  • AI Models
  • MCP Servers
  • Agent Skills
  • Chip Manufacturers

Security Data & Tools

  • Scan Your Dependencies
  • Trending Threats
  • Threat RSS Feeds
  • CVE Database
  • Actively Exploited (KEV)
  • SGZ Zero-Days
  • CWE Index
  • MITRE ATT&CK
  • Malicious Packages
  • Security Glossary
  • Supply-Chain Report
  • Developers (API & Badge)
  • Chrome Extension
  • Credits & Data Sources

Products

  • The Platform
  • ESSCM
  • Portal
  • TPRM
  • OSM
  • Cowork
  • Code / Runner
  • Guard

Use Cases

  • Know Your Software
  • Auto-Fix Vulnerabilities
  • Asset Discovery
  • AI Governance
  • MCP Server Security
  • Supply Chain Compliance
  • Zero-Day Discovery
  • All Use Cases

Company

  • About
  • Pricing
  • Blog
  • Documentation
  • Safeguard Academy
  • Contact
  • Privacy Policy
  • Terms of Service

© 2026 Gold Open Source. All rights reserved.

Built with care bySafeguard
Home/ATT&CK/Software/S0467
MITRE ATT&CK Malware

TajMahal (S0467)

ShareXLinkedInRedditHN

[TajMahal](https://attack.mitre.org/software/S0467) is a multifunctional spying framework that has been in use since at least 2014. [TajMahal](https://attack.mitre.org/software/S0467) is comprised of two separate packages, named Tokyo and Yokohama, and can deploy up to 80 plugins.(Citation: Kaspersky TajMahal April 2019)

Platforms: Windows

▪Techniques implemented (24)

T1560.002Archive via LibraryT1125Video CaptureT1082System Information DiscoveryT1113Screen CaptureT1123Audio CaptureT1518.001Security Software DiscoveryT1119Automated CollectionT1124System Time DiscoveryT1041Exfiltration Over C2 ChannelT1057Process DiscoveryT1518Software DiscoveryT1112Modify RegistryT1016System Network Configuration DiscoveryT1020Automated ExfiltrationT1129Shared ModulesT1539Steal Web Session CookieT1083File and Directory DiscoveryT1055.001Dynamic-link Library InjectionT1025Data from Removable MediaT1005Data from Local SystemT1056.001KeyloggingT1120Peripheral Device DiscoveryT1115Clipboard DataT1027Obfuscated Files or Information
S0467on MITRE ATT&CK →

MITRE ATT&CK® is a registered trademark of The MITRE Corporation. © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.