POLONIUM
Also reported as Plaid Rain, INCENDIARY JACKAL, UNC4453, GREATRIFT, Polonium and 1 other name. Linked to Lebanon by four sources.
Reports per quarter
Techniques in ATT&CK
Listed by ATT&CK
No report from the last two years names a technique ID.
CVEs named in reports
- CVE-2018-13379 KEV ransomware
- CVE-2020-35730 KEV
- CVE-2021-21551 KEV
- CVE-2021-44228 KEV ransomware
- CVE-2021-45105
- CVE-2022-26134 KEV ransomware
- CVE-2022-26352 KEV ransomware
- CVE-2022-27926 KEV
- CVE-2022-30190 KEV ransomware
- CVE-2022-41091 KEV ransomware
- CVE-2023-23397 KEV
- CVE-2023-38831 KEV ransomware
Show all 14 CVEs Show fewer
- CVE-2023-5631 KEV
- CVE-2024-21413 KEV
KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.
Reports
-
The Israel-Hamas War | Cyber Domain State-Sponsored Activity of Interest
The title opens Wayback Machine, not the publisher’s page. Archived copy on ORKL Detailsfor The Israel-Hamas War | Cyber Domain State-Sponsored Activity of Interest
-
POLONIUM targets Israel with Creepy malware
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor POLONIUM targets Israel with Creepy malware
Show all 14 reports Show fewer
-
Hacking group POLONIUM uses ‘Creepy’ malware against Israel
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Hacking group POLONIUM uses ‘Creepy’ malware against Israel
-
Exposing POLONIUM activity and infrastructure targeting Israeli organizations
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Exposing POLONIUM activity and infrastructure targeting Israeli organizations
Newest first. Details opens the report in Explore.