Operation Domino

Also reported as Operation Kremlin. Linked to Russia by one source.

Reports: 3
Last reported: 7 January 2021
Known CVEs: 2
Origin: Russia

ID: operation-domino
Sources: ETDA
Merge evidence: 0 alias matches

Reports per quarter

2020 Q4: 2 reports
2021 Q1: 1 report

Dated reports, 2020 Q4 to 2021 Q1.

CVEs named in reports

CVE-2017-0199 KEV ransomware
CVE-2020-0968 KEV ransomware

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

7 January 2021

Operation ‘Kremlin’ – ClearSky Cyber Security

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Operation ‘Kremlin’ – ClearSky Cyber Security
2 October 2020

XDSpy- Stealing government secrets since 2011

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor XDSpy- Stealing government secrets since 2011
2 October 2020

XDSpy: Stealing government secrets since 2011

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor XDSpy: Stealing government secrets since 2011

Newest first. Details opens the report in Explore.