IndigoZebra

Reports per quarter

Techniques in ATT&CK

Listed by ATT&CK

• T1105
• T1204.002
• T1566.001
• T1583.001
• T1583.006
• T1586.002
• T1588.002

No report from the last two years names a technique ID.

CVEs named in reports

• CVE-2015-5119 KEV
• CVE-2016-0984 KEV
• CVE-2016-4117 KEV ransomware
• CVE-2017-0199 KEV ransomware
• CVE-2017-0261 KEV
• CVE-2017-0262 KEV
• CVE-2017-0263 KEV

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

1. 6 April 2026

   IndigoZebra APT Hacking Campaign Targets the Afghan Government

   date ORKL added it fromORKL

   Archived copy on ORKL Detailsfor IndigoZebra APT Hacking Campaign Targets the Afghan Government

2. 6 July 2021

   IndigoZebra APT continues to attack Central Asia with evolving tools - Check Point Research

   file creation date fromORKL

   The link to CyberMonitor archive on GitHub failed its last check. CyberMonitor archive on GitHub Detailsfor IndigoZebra APT continues to attack Central Asia with evolving tools - Check Point Research

3. 2 July 2021

   Rewterz Threat Intel - IndigoZebra APT Group Targeting Central Asia - Active IOCs - Rewterz

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Rewterz Threat Intel - IndigoZebra APT Group Targeting Central Asia - Active IOCs - Rewterz

4. 1 July 2021

   IndigoZebra APT continues to attack Central Asia with evolving tools

   date in the title fromORKL

   The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor IndigoZebra APT continues to attack Central Asia with evolving tools

5. 1 July 2021

   IndigoZebra APT continues to attack Central Asia with evolving tools

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor IndigoZebra APT continues to attack Central Asia with evolving tools

6. 24 December 2020

   China cyber attacks- the current threat landscape

   date in the title fromORKL

   The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor China cyber attacks- the current threat landscape

7. 12 March 2019

   APT Trends report Q2 2017

   file creation date fromORKL

   The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor APT Trends report Q2 2017

8. 8 August 2017

   APT Trends report Q2 2017

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor APT Trends report Q2 2017

Newest first. Details opens the report in Explore.