Russian cyber attack campaigns and actors
Tags
cmtmf-attack-pattern: Geofencing
country: Brazil Malaysia Canada China Germany France Georgia India Iran Japan South Korea Saudi Arabia Latvia Libya Lithuania Mexico New Zealand Poland Russia Syria Ukraine United Kingdom United States Of America
maec-delivery-vectors: Watering Hole
attack-pattern: Data Direct Model Artificial Intelligence - T1588.007 Botnet - T1583.005 Botnet - T1584.005 Cloud Services - T1021.007 Digital Certificates - T1596.003 Digital Certificates - T1587.003 Digital Certificates - T1588.004 Domains - T1583.001 Domains - T1584.001 Dynamic Dns - T1311 Dynamic Dns - T1333 Email Accounts - T1585.002 Email Accounts - T1586.002 Encrypted Channel - T1521 Encrypted Channel - T1573 Exploits - T1587.004 Exploits - T1588.005 Geofencing - T1627.001 Geofencing - T1581 Hardware - T1592.001 Internal Proxy - T1090.001 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Password Spraying - T1110.003 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Remote Desktop Protocol - T1021.001 Scheduled Task - T1053.005 Server - T1583.004 Server - T1584.004 Social Media - T1593.001 Software - T1592.002 Tool - T1588.002 Vulnerabilities - T1588.006 Vulnerability Scanning - T1595.002 Brute Force - T1110 Powershell - T1086 Remote Access Tools - T1219 Remote Desktop Protocol - T1076 Scheduled Task - T1053 Denial Of Service
Show in Graph
Common Information
Type Value
UUID be1a9132-5747-4f30-abf4-be0401382040
Fingerprint 659409118d1187a1
Analysis status DONE
Considered CTI value 2
Text language
Published Oct. 25, 2021, midnight
Added to db Sept. 26, 2022, 9:30 a.m.
Last updated Nov. 17, 2024, 6:54 p.m.
Headline Russian cyber attack campaigns and actors
Title Russian cyber attack campaigns and actors
Detected Hints/Tags/Attributes 316/4/7
Source URLs
Redirection Url
Details Source https://ironnet.com/blog/russian-cyber-attack-campaigns-and-actors/
Details Source https://www.ironnet.com/blog/russian-cyber-attack-campaigns-and-actors
URL Provider
Details Provider Source level domain
Details ironnet.com www.ironnet.com
Details ironnet.com ironnet.com
Attributes
Details Type #Events CTI Value
Details Mandiant Temporary Group Assumption 7 
TEMP.NOBLE
Details Mandiant Temporary Group Assumption 8 
TEMP.MIXMASTER
Details Mandiant Temporary Group Assumption 21 
TEMP.VELES
Details Threat Actor Identifier - APT 665 
APT29
Details Threat Actor Identifier - APT 783 
APT28
Details Threat Actor Identifier by SecureWorks 15 
TG-4127
Details Threat Actor Identifier - FIN 377 
FIN7