SparklingGoblin APT Hackers Using New Linux Variant of SideWalk Backdoor
Tags
country: Hong Kong Slovakia
attack-pattern: Botnet - T1583.005 Botnet - T1584.005 Dead Drop Resolver - T1102.001 Dead Drop Resolver - T1481.001 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Software - T1592.002
Show in Graph
Common Information
Type Value
UUID e7bd19fc-0da6-47b4-a50f-1a1c485c85a1
Fingerprint 95b0999349d1b5a8
Analysis status DONE
Considered CTI value 1
Text language
Published Sept. 14, 2022, 3:50 p.m.
Added to db Jan. 18, 2023, 10:38 p.m.
Last updated Dec. 25, 2024, 9:29 a.m.
Headline SparklingGoblin APT Hackers Using New Linux Variant of SideWalk Backdoor
Title SparklingGoblin APT Hackers Using New Linux Variant of SideWalk Backdoor
Detected Hints/Tags/Attributes 40/2/2
Source URLs
Redirection Url
Details Source https://thehackernews.com/2022/09/sparklinggoblin-apt-hackers-using-new.html
URL Provider
Details Provider Source level domain
Details thehackernews.com thehackernews.com
Attributes
Details Type #Events CTI Value
Details IPv4 5 
66.42.103.222
Details Threat Actor Identifier - APT 609 
APT41