Nitro

Also reported as Covert Grove. Linked to China by three sources.

Reports: 3
Last reported: 8 August 2022
Known CVEs: 1
Origin: China

ID: nitro
Sources: MISP ETDA Malpedia
Merge evidence: 4 alias matches

Reports per quarter

2011 Q4: 1 report
2012 Q1: no reports
2012 Q2: no reports
2012 Q3: no reports
2012 Q4: no reports
2013 Q1: no reports
2013 Q2: no reports
2013 Q3: no reports
2013 Q4: no reports
2014 Q1: no reports
2014 Q2: no reports
2014 Q3: no reports
2014 Q4: 1 report
2015 Q1: no reports
2015 Q2: no reports
2015 Q3: no reports
2015 Q4: no reports
2016 Q1: no reports
2016 Q2: no reports
2016 Q3: no reports
2016 Q4: no reports
2017 Q1: no reports
2017 Q2: no reports
2017 Q3: no reports
2017 Q4: no reports
2018 Q1: no reports
2018 Q2: no reports
2018 Q3: no reports
2018 Q4: no reports
2019 Q1: no reports
2019 Q2: no reports
2019 Q3: no reports
2019 Q4: no reports
2020 Q1: no reports
2020 Q2: no reports
2020 Q3: no reports
2020 Q4: no reports
2021 Q1: no reports
2021 Q2: no reports
2021 Q3: no reports
2021 Q4: no reports
2022 Q1: no reports
2022 Q2: no reports
2022 Q3: 1 report

Dated reports, 2011 Q4 to 2022 Q3.

CVEs named in reports

CVE-2015-5119 KEV

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

8 August 2022

Dynamite Panda APT Group - Brandefense

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Dynamite Panda APT Group - Brandefense
3 October 2014

New Indicators of Compromise for APT Group Nitro Uncovered - Palo Alto Networks BlogPalo Alto Networks Blog

date in the CCS '25 data Palo Alto fromORKLCCS '25 data

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor New Indicators of Compromise for APT Group Nitro Uncovered - Palo Alto Networks BlogPalo Alto Networks Blog
28 October 2011

the_nitro_attacks

file creation date Symantec fromORKL

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor the_nitro_attacks

Newest first. Details opens the report in Explore.