Common Information
| Type | Value |
|---|---|
| Value |
FlyingYeti |
| Category | Actor |
| Type | Threat-Actor |
| Misp Type | Cluster |
| Description | FlyingYeti is a Russia-aligned threat actor targeting Ukrainian military entities. They conduct reconnaissance activities and launch phishing campaigns using malware like COOKBOX. FlyingYeti exploits the WinRAR vulnerability CVE-2023-38831 to infect targets with malicious payloads. Cloudforce One has successfully disrupted their operations and provided recommendations for defense against their phishing campaigns. |