InvisiMole

Reports per quarter

Techniques seen in the last two years

• T1012 1 report
• T1036.005 1 report
• T1057 1 report
• T1059.001 1 report
• T1071.001 1 report
• T1082 1 report
• T1083 1 report
• T1102 1 report
• T1140 1 report
• T1480.001 1 report

Counts come from technique IDs in the actor's report text.

CVEs named in reports

• CVE-2007-5633
• CVE-2009-0824
• CVE-2010-1592
• CVE-2012-0158 KEV ransomware
• CVE-2012-5687
• CVE-2013-5947
• CVE-2014-1225
• CVE-2014-2962
• CVE-2014-4019
• CVE-2014-8361 KEV
• CVE-2014-9583
• CVE-2015-0554

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

1. 6 April 2026

   DCRat (Malware Family)

   date ORKL added it fromORKL

   The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor DCRat (Malware Family)

2. 6 April 2026

   HermeticWiper (Malware Family)

   date ORKL added it fromORKL

   The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor HermeticWiper (Malware Family)

3. 6 April 2026

   IsaacWiper (Malware Family)

   date ORKL added it fromORKL

   The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor IsaacWiper (Malware Family)

4. 6 April 2026

   Ukraine warns of InvisiMole attacks tied to state-sponsored Russian hackers

   date ORKL added it fromORKL

   Archived copy on ORKL Detailsfor Ukraine warns of InvisiMole attacks tied to state-sponsored Russian hackers

5. 6 April 2026

   DoubleZero (Malware Family)

   date ORKL added it fromORKL

   The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor DoubleZero (Malware Family)

6. 6 April 2026

   AcidRain (Malware Family)

   date ORKL added it fromORKL

   The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor AcidRain (Malware Family)

7. 6 April 2026

   PartyTicket (Malware Family)

   date ORKL added it fromORKL

   The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor PartyTicket (Malware Family)

8. 19 September 2025

   Gamaredon X Turla collab

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Gamaredon X Turla collab

9. 27 November 2022

   Malware development tricks: part 24. Listplanting. C++ example.

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Malware development tricks: part 24. Listplanting. C++ example.

10. 18 August 2022

    Overview of the Cyber Weapons Used in the Ukraine - Russia War

    date in the title fromORKL

    The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Overview of the Cyber Weapons Used in the Ukraine - Russia War

Newest first. Details opens the report in Explore.