Octopus

Malware updated 4 months ago (2024-05-04T17:18:22.842Z)
Download STIX
Preview STIX
Octopus is a malware, a harmful program designed to exploit and damage computer systems. It can infiltrate systems through suspicious downloads, emails, or websites, often without the user's knowledge. Once inside, it can steal personal information, disrupt operations, or even hold data hostage for ransom. This malware has been associated with various incidents and developments across different sectors. In 2020, the legal team at UK energy retailer Octopus Energy developed Kraken, a customer billing platform that was subsequently licensed to rival energy providers like Eon in the UK and overseas markets. The same year, the company's legal team advised on the acquisition and integration of 1.5 million customers from Bulb, a rival provider that went into special administration in 2021. This move significantly contributed to the growth of Octopus Energy. Secret Double Octopus (SDO), a leader in workforce passwordless MFA, collaborated with ForgeRock Enterprise Connect Passwordless to integrate SDO's Octopus platform for passwordless MFA. This integration aimed to deliver a greater return on investment than traditional MFA methods that rely on passwords. The Octopus platform decouples user authentication from backend identity management, enabling comprehensive coverage for workforce use cases.
Description last updated: 2024-05-04T16:26:45.875Z
What's your take? (Question 1 of 5)
Help tune the shared Cybergeist dataset, assist your peers, and earn karma. Expand the panel to get started.
Aliases We are not currently tracking any aliases
Miscellaneous Associations
Other elements of context that could aid in the identification of relevance
Telegram
Malware
Windows
Espionage
Apt
Trojan
Phishing
Analyst Notes & Discussion
Be the first to leave your mark here! Log in to share your views and vote.
Associated Threat Actors
To see the evidence that has resulted in these threatActor associations, create a free account
IDTypeVotesProfile Description
Nomadic OctopusUnspecified
3
Nomadic Octopus, a suspected Russian Advanced Persistent Threat (APT) group, has been engaged in a cyber-espionage campaign known as Paperbug since 2020. The group infiltrated a Tajikistani carrier to spy on government officials and public service infrastructures, compromising government networks, i
DustSquadUnspecified
3
DustSquad, also known as Nomadic Octopus, is a notable threat actor that has been implicated in several cyber-espionage campaigns. Throughout 2018, DustSquad, along with other actors like IndigoZebra and Sofacy, targeted political entities in Central Asia using the Octopus malware. This was revealed
APT28Unspecified
2
APT28, also known as Fancy Bear, Pawn Storm, Sofacy Group, Sednit, BlueDelta, and STRONTIUM, is a threat actor linked to Russia that has been active since at least 2007. The group has targeted governments, militaries, and security organizations worldwide, including the German Social Democratic Party
PaperbugUnspecified
2
Paperbug is a cyber-espionage campaign executed by a suspected Russian threat actor known as Nomadic Octopus, also referred to as DustSquad. The Swiss cybersecurity company Prodaft has released a report detailing the actions of this group, outlining their tactics, techniques, and procedures (TTPs).
SofacyUnspecified
2
Sofacy is a threat actor group that has been observed using multiple languages to create variants of the Zebrocy Trojan and Cannon. In one campaign, they relied heavily on filenames to lure victims into launching weaponized documents. The group packed only Delphi variants in an attempt to increase e
Source Document References
Information about the Octopus Malware was read from the documents corpus below. This display is limited to 20 results, create a free account to see more
PreviewSource LinkCreatedAtTitle
CERT-EU
8 months ago
Russia hacked ex-MI6 chief’s emails – what they reveal is more Dad’s Army than deep state | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #hacker
CERT-EU
10 months ago
Search | arXiv e-print repository
CERT-EU
10 months ago
Search | arXiv e-print repository
CERT-EU
a year ago
Marvel vs. Capcom 3 Hackers Find Classic Spider-Man Villain In Game | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #hacker | National Cyber Security Consulting
CERT-EU
a year ago
The Media Are Targeting the Public for a War with China - Global Research
CERT-EU
a year ago
Is Your Workforce Ready for Passwordless MFA?
CERT-EU
a year ago
Practice of law: best examples in legal work
CERT-EU
a year ago
Standout examples of in-house lawyers’ work
CERT-EU
a year ago
Meet the top FT 20 in-house legal leaders
CERT-EU
a year ago
Absolute Software expands application resilience ecosystem
MITRE
2 years ago
Picking Apart Remcos Botnet-In-A-Box
CERT-EU
a year ago
Venture Capital Investments at Risk : DynaRisk Identifies Critical Cybersecurity Gaps in Companies Backed By Some Of London's Biggest VC Funds – Global Security Mag Online
CERT-EU
a year ago
Expanding the scope of Cyber Incident Response (CIR) – GIXtools
CERT-EU
a year ago
MOVEit hack: media watchdog Ofcom data downloaded in cyber attack – GIXtools
CERT-EU
a year ago
SBOM Executive Order: Ready for the June 11th deadline?
MITRE
2 years ago
Russia-Linked Hackers Target Diplomatic Entities in Central Asia
MITRE
2 years ago
Octopus-infested seas of Central Asia
CERT-EU
2 years ago
How observability prevents developers from flying blind - SD Times
CSO Online
a year ago
ForgeRock, Secret Double Octopus offer passwordless authentication for enterprises
CERT-EU
a year ago
«Тактический осьминог» запустил свои щупальца в налоговую службу США