Cyber Espionage Group Earth Kitsune Deploys WhiskerSpy Backdoor in Latest Attacks
Tags
country: Brazil China North Korea Japan Taiwan
attack-pattern: Data Exploits - T1587.004 Exploits - T1588.005 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004
Show in Graph
Common Information
Type Value
UUID acbf8234-9bb3-442b-b22b-f9b74b2842af
Fingerprint 8504acd19035c56d
Analysis status DONE
Considered CTI value 1
Text language
Published Feb. 20, 2023, 3:41 p.m.
Added to db Feb. 20, 2023, 1:22 p.m.
Last updated Nov. 18, 2024, 7:31 a.m.
Headline Cyber Espionage Group Earth Kitsune Deploys WhiskerSpy Backdoor in Latest Attacks
Title Cyber Espionage Group Earth Kitsune Deploys WhiskerSpy Backdoor in Latest Attacks
Detected Hints/Tags/Attributes 54/2/3
Source URLs
Redirection Url
Details Source https://thehackernews.com/2023/02/north-korean-cyber-espionage-group.html
URL Provider
Details Provider Source level domain
Details thehackernews.com thehackernews.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 164 ✔ — https://media.cert.europa.eu/rss?type=category&id=SocialEngineering&language=en&duplicates=false 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details File 2 
codec-avc1.msi
Details Threat Actor Identifier - APT 278 
APT10
Details Threat Actor Identifier - APT 666 
APT29