ALUMINUM SHADYSIDE

ALUMINUM SHADYSIDE (also known as Arid Viper) is a threat group that CTU researchers assess with low confidence to be of Palestinian origin with ties to Hamas. They been observed by CTU researchers targeting networks in the Middle East (primarily Palestine) using different malware variants. The group has targeted organisations in media, government, military and physical security.

ALUMINUM SHADYSIDE leverages sophisticated phishing lures that are targeted to their victims including the use of fake websites and social media profiles. They have shown evidence of being native Arabic speakers and of being active since 2011.