Russia-Aligned TAG-110 Targets Asia and Europe with HATVIBE and CHERRYSPY
Tags
country: Kazakhstan Kyrgyzstan Uzbekistan Russia Ukraine
maec-delivery-vectors: Watering Hole
attack-pattern: Domains - T1583.001 Domains - T1584.001 Malware - T1587.001 Malware - T1588.001 Mshta - T1218.005 Multi-Factor Authentication - T1556.006 Phishing - T1660 Phishing - T1566 Python - T1059.006 Server - T1583.004 Server - T1584.004 Software - T1592.002 Vulnerabilities - T1588.006 Mshta - T1170
Show in Graph
Common Information
Type Value
UUID 4e1f6cd8-3d20-4dc4-8567-8819144883a1
Fingerprint adcc1cb58b7b8796
Analysis status DONE
Considered CTI value 2
Text language
Published Nov. 21, 2024, midnight
Added to db Nov. 21, 2024, 4:11 p.m.
Last updated Dec. 17, 2024, 7:36 p.m.
Headline Russia-Aligned TAG-110 Targets Asia and Europe with HATVIBE and CHERRYSPY
Title Russia-Aligned TAG-110 Targets Asia and Europe with HATVIBE and CHERRYSPY
Detected Hints/Tags/Attributes 54/3/5
Source URLs
Redirection Url
Details Source https://www.recordedfuture.com/research/russia-aligned-tag-110-targets-asia-and-europe
URL Provider
Details Provider Source level domain
Details recordedfuture.com www.recordedfuture.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 359 ✔ Recorded Future https://www.recordedfuture.com/feed 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CERT Ukraine 20 
UAC-0063
Details CVE 12 
cve-2024-23692
Details File 496 
mshta.exe
Details Threat Actor Identifier - APT 837 
APT28
Details Threat Actor Identifier by Recorded Future 16 
TAG-110