Nazar
Also reported as SIG37. Linked to Iran by one source.
Reports per quarter
CVEs named in reports
- CVE-2018-13379 KEV ransomware
- CVE-2018-1579
- CVE-2019-11510 KEV ransomware
- CVE-2019-1367 KEV ransomware
- CVE-2019-17026 KEV
- CVE-2019-2215 KEV
- CVE-2020-0674 KEV
- CVE-2020-0688 KEV ransomware
- CVE-2020-6418 KEV
- CVE-2020-6819 KEV
- CVE-2020-6820 KEV
- CVE-2020-8467 KEV
Show all 13 CVEs Show fewer
- CVE-2020-8468 KEV
KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.
Reports
-
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor 0628-2020APT上半年报告-画册
-
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Nazar- Spirits of the Past
-
Nazar_ Spirits of the Past - Check Point Research
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Nazar_ Spirits of the Past - Check Point Research
-
Quick look at Nazar's backdoor - Network Communication
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Quick look at Nazar's backdoor - Network Communication
-
Quick look at Nazar backdoor - Capabilities
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Quick look at Nazar backdoor - Capabilities
-
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Nazar- A Lost Amulet
Show all 12 reports Show fewer
-
ukatemicrysys_territorialdispute
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor ukatemicrysys_territorialdispute
Newest first. Details opens the report in Explore.