BlueBottle
Also reported as OPERA1ER, DESKTOP-GROUP, Common Raven, NXSMS and Bluebottle.
Reports per quarter
Techniques seen in the last two years
- T1027.007 1 report
- T1027.013 1 report
- T1053 1 report
- T1053.002 1 report
- T1053.003 1 report
- T1053.006 1 report
- T1056.001 1 report
- T1057 1 report
- T1059.004 1 report
- T1071 1 report
Show all 24 techniques Show fewer
Counts come from technique IDs in the actor's report text.
CVEs named in reports
- CVE-2020-9049
- CVE-2021-26855 KEV ransomware
- CVE-2021-26857 KEV ransomware
- CVE-2021-27065 KEV ransomware
- CVE-2022-42475 KEV ransomware
- CVE-2022-47966 KEV ransomware
KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.
Reports
-
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor NetWire RC (Malware Family)
-
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor CloudEyE (Malware Family)
-
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor MimiKatz (Malware Family)
-
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Quasar RAT (Malware Family)
-
Rewterz Threat Alert – Common Raven – IOCs
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Rewterz Threat Alert – Common Raven – IOCs
Newest first. Details opens the report in Explore.