Cyber Espionage Group Earth Kitsune Deploys WhiskerSpy Backdoor in Latest Attacks - RedPacket Security
Tags
country: Brazil China North Korea Japan Taiwan
attack-pattern: Data Exploits - T1587.004 Exploits - T1588.005 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004
Show in Graph
Common Information
Type Value
UUID 9f408083-d3b4-4f4a-9ed1-f57edb2189f5
Fingerprint 85048cd1902fc66d
Analysis status DONE
Considered CTI value 1
Text language
Published Feb. 20, 2023, 9:02 p.m.
Added to db Feb. 20, 2023, 11:55 p.m.
Last updated Nov. 18, 2024, 7:31 a.m.
Headline Cyber Espionage Group Earth Kitsune Deploys WhiskerSpy Backdoor in Latest Attacks
Title Cyber Espionage Group Earth Kitsune Deploys WhiskerSpy Backdoor in Latest Attacks - RedPacket Security
Detected Hints/Tags/Attributes 56/2/3
Source URLs
Redirection Url
Details Source https://www.redpacketsecurity.com/cyber-espionage-group-earth-kitsune-deploys-whiskerspy-backdoor-in-latest-attacks/
URL Provider
Details Provider Source level domain
Details redpacketsecurity.com www.redpacketsecurity.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 361 ✔ RedPacket Security https://www.redpacketsecurity.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details File 2 
codec-avc1.msi
Details Threat Actor Identifier - APT 278 
APT10
Details Threat Actor Identifier - APT 666 
APT29