Russian Cyber Spies Target Organizations with Custom Malware
Tags
country: Armenia China Greece Hungary India Israel Kazakhstan Kyrgyzstan Mongolia Tajikistan Uzbekistan Russia Togo Turkmenistan Ukraine
maec-delivery-vectors: Watering Hole
attack-pattern: Data Malware - T1587.001 Malware - T1588.001 Mshta - T1218.005 Phishing - T1660 Phishing - T1566 Python - T1059.006 Scheduled Task - T1053.005 Software - T1592.002 Vulnerabilities - T1588.006 Mshta - T1170 Scheduled Task - T1053
Show in Graph
Common Information
Type Value
UUID b0b7aabe-3462-45d8-a7c0-e7a7c9a41dbd
Fingerprint ddd4019f43758eb8
Analysis status DONE
Considered CTI value 2
Text language
Published Nov. 22, 2024, 1 p.m.
Added to db Nov. 22, 2024, 2:51 p.m.
Last updated Dec. 17, 2024, 7:36 p.m.
Headline Russian Cyber Spies Target Organizations with HatVibe and CherrySpy Malware
Title Russian Cyber Spies Target Organizations with Custom Malware
Detected Hints/Tags/Attributes 64/3/5
Source URLs
Redirection Url
Details Source https://www.infosecurity-magazine.com/news/russian-cyber-spies-hatvibe/
URL Provider
Details Provider Source level domain
Details infosecurity-magazine.com www.infosecurity-magazine.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 135 ✔ — https://infosecurity-magazine.com/rss/news/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CERT Ukraine 20 
UAC-0063
Details CVE 12 
cve-2024-23692
Details File 496 
mshta.exe
Details Threat Actor Identifier - APT 837 
APT28
Details Threat Actor Identifier by Recorded Future 16 
TAG-110