ID | Votes | Profile Description |
---|---|---|
Tunnus | 2 | Tunnus is a type of malware, or malicious software, that has been identified as potentially harmful to computer systems and devices. Identified by the SHA-256 hash 046f11a6c561e46e6bf199ab7f50e74a4d2aaead68cdbd6ce44b37b5b4964758, Tunnus uses the same RC4 implementation as TunnusSched and Topinambour |
Unc4210 | 2 | UNC4210 is a malicious software (malware) discovered by Mandiant in September 2022, suspected to be an operation of the Turla Team. This malware was identified as it re-registered three expired ANDROMEDA command and control (C2) domains and began selectively deploying KOPILUWAK and QUIETCANARY to vi |
Tomiris | 2 | Tomiris is a malicious software (malware) group that has been active since before 2019. Known for its use of the QUIETCANARY backdoor, Tomiris has expanded its capabilities and influence within the region, targeting government entities and other high-value targets. The group has shown a particular i |
ID | Type | Votes | Profile Description |
---|---|---|---|
KOPILUWAK | Unspecified | 3 | KopiLuwak is a JavaScript-based malware used for command and control (C2) communications and victim profiling. It was initially dropped by Pensive Ursa using an MSIL dropper in a G20-themed attack in 2017, and later as a self-extracting archive (SFX) executable in late 2022. Upon execution, the SFX |
ID | Type | Votes | Profile Description |
---|---|---|---|
Turla | Unspecified | 2 | Turla, a threat actor linked to Russia, is known for its sophisticated cyber-espionage activities. It has been associated with numerous high-profile attacks, employing innovative techniques and malware to infiltrate targets and execute actions with malicious intent. According to MITRE ATT&CK and MIT |
Preview | Source Link | CreatedAt | Title |
---|---|---|---|
MITRE | 9 months ago | Turla: A Galaxy of Opportunity | |
CERT-EU | a year ago | Russian Hackers Tomiris Targeting Central Asia for Intelligence Gathering | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #hacker – National Cyber Security Consulting | |
CERT-EU | a year ago | Tomiris called, they want their Turla malware back | |
Unit42 | a year ago | Threat Group Assessment: Turla (aka Pensive Ursa) | |
CERT-EU | a year ago | Russian Hackers Tomiris Targeting Central Asia for Intelligence Gathering | |
CERT-EU | a year ago | APT trends report Q1 2023 - GIXtools | |
CERT-EU | a year ago | Crooks show they don't need ChatGPT to scam victims | |
CERT-EU | a year ago | IT threat evolution in Q2 2023 – GIXtools | |
CERT-EU | a year ago | IT threat evolution Q2 2023 | |
CERT-EU | a year ago | Tomiris called, they want their Turla malware back - GIXtools | |
CERT-EU | a year ago | APT trends report Q1 2023 |