Common Information
| Type | Value |
|---|---|
| Value |
肚脑虫 - APT-C-35 |
| Category | Actor |
| Type | 360net-Threat-Actor |
| Misp Type | Cluster |
| Description | APT-C-35（肚脑虫）组织，又称Donot，是一个针对克什米尔地区相关国家的政府机构等领域进行网络间谍活动，以窃取敏感信息为主的攻击组织。该组织于2017年3月由360追日团队首次曝光，随后有数个国内外安全团队持续追踪并披露该组织的最新攻击活动。攻击活动最早始于2016年4月，至今活跃，攻击方式主要采用鱼叉邮件进行攻击。 |
| Details | Published | Attributes | CTI | Title | ||
|---|---|---|---|---|---|---|
| Details | Website | 2024-11-15 | 33 | DONOT's Attack On Maritime & Defense Manufacturing | ||
| Details | Website | 2024-10-21 | 902 | RST TI Report Digest: 21 Oct 2024 | ||
| Details | Website | 2024-10-18 | 40 | 每周高级威胁情报解读(2024.10.18~10.24) | ||
| Details | Website | 2024-07-18 | 40 | APT-C-35（肚脑虫）组织针对南亚某制造公司的攻击活动分析 | CTF导航 | ||
| Details | Website | 2024-02-07 | 10 | Avast Q4/2023 Threat Report - Avast Threat Labs | ||
| Details | Website | 2023-11-06 | 106 | 安全事件周报 2023-10-30 第44周 - 360CERT | ||
| Details | Website | 2023-11-02 | 3 | Rewterz Threat Advisory – ICS: Multiple Hitachi Energy eSOMS Vulnerabilities | ||
| Details | Website | 2023-11-02 | 10 | Rewterz Threat Alert – Donot APT Group – Active IOCs | ||
| Details | Website | 2023-11-01 | 42 | DoNot APT expands its arsenal to spy on victim's VoIP calls | ||
| Details | Website | 2023-10-30 | 108 | 安全事件周报 2023-10-30 第44周 | ||
| Details | Website | 2023-10-27 | 22 | Rewterz Threat Alert – RedLine Stealer – Active IOCs | ||
| Details | Website | 2023-10-27 | 2 | Rewterz Threat Advisory – Multiple F5 BIG-IP Vulnerabilities | ||
| Details | Website | 2023-10-26 | 3 | Rewterz Threat Update – DoNot APT Group Targets Pakistan and Afghanistan with New Firebird Backdoor | ||
| Details | Website | 2023-10-24 | 2 | Afghanistan, Pakistan subjected to DoNot Team attacks with new backdoor | ||
| Details | Website | 2023-10-24 | 3 | DoNot Team's New Firebird Backdoor Hits Pakistan and Afghanistan - RedPacket Security | ||
| Details | Website | 2023-10-23 | 3 | DoNot Team's New Firebird Backdoor Hits Pakistan and Afghanistan | ||
| Details | Website | 2023-10-05 | 6 | APT Profile: Dark Pink APT Group | ||
| Details | Website | 2023-08-20 | 70 | Bluepurple Pulse: week ending August 20th | ||
| Details | Website | 2023-08-12 | 1 | WhatsApp : une fausse application Android vole les données des utilisateurs | ||
| Details | Website | 2023-08-10 | 15 | Avast Q2/2023 Threat Report - Avast Threat Labs | ||
| Details | Website | 2023-08-02 | 0 | Threat Actor Bahamut Uses Fake Android Chat App To Steal Signal, WhatsApp Data | ||
| Details | Website | 2023-08-01 | 0 | Fraudulent Android chat app leveraged in new Bahamut attack | ||
| Details | Website | 2023-08-01 | 4 | New Android Malware Via WhatsApp steals Call logs, Locations, & Contacts | ||
| Details | Website | 2023-08-01 | 1 | Hackers steal Signal, WhatsApp user data with fake Android chat app - RedPacket Security | ||
| Details | Website | 2023-08-01 | 0 | WhatsApp chats, personal information of users in India at risk, hackers using this app to target |