コンテンツに移動

Threat profiles.

Explore the latest threat group definitions and profiles published by the 

Sophos® Counter Threat Unit™ (CTU) Research Team.!

表示中 171-180 / 181 プロファイル
名前場所目的別名ツール
NICKEL FOXCROFT iconNorth Korea
Espionage
APT37 (FireEye), ATK4 (Thales), Group 123 (Talos), InkySquid (Volexity), Moldy Pisces (Palo Alto), Operation Daybreak (Kaspersky), Operaton Erebus (Kaspersky), Reaper (FireEye), RICOCHET CHOLLIMA (CrowdStrike), ScarCruft (Kaspersky), TA-RedAnt (ASEC), Venus 121 (ESRC)
Bluelight, Chinotto, final1stpy, GOLDBACKDOOR, KevDroid, KoSpy, PoorWeb, ROKRAT
NICKEL GLADSTONE iconNorth Korea
Financial Gain
Alluring Pisces (Palo Alto), APT38 (FireEye), ATK 117 (Thales), Black Alicanto (PWC), Bluenoroff (Kaspersky), Citrine Sleet (Microsoft), CTG-6459 (SCWX CTU), HIDDEN COBRA (U.S. Government), Lazarus Group, Sapphire Sleet (Microsoft), Selective Pisces (Palo Alto), Stardust Chollima (CrowdStrike), T-APT-15 (Tencent), TA444 (Proofpoint), TAG-71 (Recorded Future)
AlphaNC, Bankshot, CATCH22, CCGC_Proxy, Cur1Agent, KANDYKORN, Ratankba, RustBucket, Server_TrafficForwarder, SUGARLOADER, SwiftLoader, Wcry
NICKEL HYATT iconNorth Korea
Espionage, Financial Gain
Andariel, APT45 (Mandiant), Dark Seoul, Jumpy Pisces (Palo Alto), Onyx Sleet (Microsoft), RIFLE Campaign, Silent Chollima (CrowdStrike), Stonefly (Symantec), UN614 (Mandiant)
ActiveX 0-day, DTrack, HazyLoad, HotCriossant, Rifle, UnitBot, Valefor
NICKEL JUNIPER iconNorth Korea
Espionage
Konni, Opal Sleet (Microsoft), OSMIUM (Microsoft)
Konni
NICKEL KIMBALL iconNorth Korea
Espionage
APT43 (Mandiant), ARCHIPELAGO (Google), Black Banshee (PWC), Crooked Pisces (Palo Alto), Emerald Sleet (Microsoft), ITG16 (IBM), Kimsuky (Kaspersky), Larva-24005 (AhnLab), Opal Sleet (Microsoft), Ruby Sleet (Microsoft), SharpTongue (Volexity), Sparking Pisces (Palo Alto), Springtail (Symantec), TA406 (Proofpoint), TA427 (Proofpoint), THALLIUM (Microsoft), UAT-5394 (Talos), Velvet Chollima (CrowdStrike)
BabyShark, FastFire, FastSpy, FireViewer, KimJongRAT, Kimsuky, KONNI, ReconShark
NICKEL TAPESTRY iconNorth Korea
Financial Gain
CL-STA-0237 (Palo Alto), CL-STA-0241 (Palo Alto), DPRK IT Workers, Famous Chollima (Crowdstrike), Jasper Sleet (Microsoft), PurpleDelta (Recorded Future), Storm-0287 (Microsoft), UNC5267 (Mandiant), Wagemole (Palo Alto)
PLATINUM COLONY iconUnited States
Espionage
Equation Group (Kaspersky)
DoubleFantasy, EquationDrug, EquationLaser, Fanny, GrayFish, TripleFantasy
PLATINUM TERMINAL iconUnited States
Espionage, Surveillance
APT-C-39 (Qihoo 360), Longhorn (Symantec), The Lamberts (Kaspersky), Vault7 (Wikileaks)
AfterMidnight, Assassin, Marble Framework
TIN WOODLAWN iconVietnam
Espionage, Surveillance
APT32 (FireEye), Cobalt Kitty, OceanLotus, WOODLAWN (SCWX CTU)
Cobalt Strike, Denis, Goopy, JEShell, KerrDown, Mimikatz, Ratsnif, Remy, Rizzo, RolandRAT
TUNGSTEN BRIDGE iconSouth Korea
Espionage
APT-C-06 (Qihoo 360), ATK52 (Thales), CTG-1948 (SCWX CTU), DarkHotel (Kaspersky), DUBNIUM (Microsoft), Fallout Team (Fireye), Shadow Crane (CrowdStrike), Zigzag Hail (Microsoft)
Nemim, Tapaoux