Operation Ghoul

Reports per quarter

CVEs named in reports

• CVE-2015-2545 KEV
• CVE-2016-0165 KEV
• CVE-2016-1010 KEV
• CVE-2016-3393 KEV
• CVE-2016-4171 KEV

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

1. 14 December 2016

   Kaspersky Security Bulletin 2016. Review of the year. Overall statistics for 2016

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Kaspersky Security Bulletin 2016. Review of the year. Overall statistics for 2016

2. 17 August 2016

   Operation Ghoul: targeted attacks on industrial and engineering organizations

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Operation Ghoul: targeted attacks on industrial and engineering organizations

3. 17 August 2016

   Operation Ghoul: targeted attacks on industrial and engineering organizations

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Operation Ghoul: targeted attacks on industrial and engineering organizations

4. 17 August 2016

   Operation Ghoul- targeted attacks on industrial and engineering organizations

   date in the title fromORKL

   The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Operation Ghoul- targeted attacks on industrial and engineering organizations

5. 17 August 2016

   Operation Ghoul_ targeted attacks on industrial and engineering organizations - Securelist

   date in the CCS '25 data Kaspersky fromORKLCCS '25 data

   The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Operation Ghoul_ targeted attacks on industrial and engineering organizations - Securelist

Newest first. Details opens the report in Explore.