Nomadic Octopus
Also reported as DustSquad, Golden Falcon and APT-C-34. Linked to Russia by three sources.
Reports per quarter
Techniques in ATT&CK
Listed by ATT&CK
No report from the last two years names a technique ID.
CVEs named in reports
- CVE-2016-4117 KEV ransomware
- CVE-2017-11882 KEV ransomware
- CVE-2018-15982 KEV ransomware
KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.
Reports
-
Threat Group Cards: A Threat Actor Encyclopedia
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Threat Group Cards: A Threat Actor Encyclopedia
-
APT_trends_report_Q2_2022_Securelist
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor APT_trends_report_Q2_2022_Securelist
Show all 24 reports Show fewer
-
Extensive hacking operation discovered in Kazakhstan
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Extensive hacking operation discovered in Kazakhstan
-
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor APT-C-34.cn
-
Octopus-infested seas of Central Asia
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Octopus-infested seas of Central Asia
-
Russian-language actor exploits hype over Telegram ban in Central Asia
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Russian-language actor exploits hype over Telegram ban in Central Asia
Newest first. Details opens the report in Explore.