Operation Earth Kitsune
Linked to North Korea by one source.
Reports per quarter
CVEs named in reports
- CVE-2009-0290
- CVE-2011-4066
- CVE-2014-2339
- CVE-2016-0189 KEV ransomware
- CVE-2017-11882 KEV ransomware
- CVE-2019-0803 KEV ransomware
- CVE-2019-1458 KEV ransomware
- CVE-2019-2215 KEV
- CVE-2019-5782
- CVE-2020-0674 KEV
KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.
Reports
-
Operation Earth Kitsune - Threat Group Cards: A Threat Actor Encyclopedia
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Operation Earth Kitsune - Threat Group Cards: A Threat Actor Encyclopedia
-
Who is the Threat Actor Behind Operation Earth Kitsune-
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Who is the Threat Actor Behind Operation Earth Kitsune-
-
SideWinder Uses South Asian Issues for Spear Phishing, Mobile Attacks
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor SideWinder Uses South Asian Issues for Spear Phishing, Mobile Attacks
-
Operation Earth Kitsune- A Dance of Two New Backdoors
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Operation Earth Kitsune- A Dance of Two New Backdoors
-
Operation Earth Kitsune: Tracking SLUB’s Current Operations
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Operation Earth Kitsune: Tracking SLUB’s Current Operations
Newest first. Details opens the report in Explore.