Operation Groundbait

Linked to Ukraine by one source.

Reports: 7
Last reported: 30 August 2023
Known CVEs: 1
Origin: Ukraine

ID: operation-groundbait
Sources: ETDA
Merge evidence: 0 alias matches

Reports per quarter

2016 Q2: 4 reports
2016 Q3: no reports
2016 Q4: no reports
2017 Q1: 1 report
2017 Q2: no reports
2017 Q3: no reports
2017 Q4: no reports
2018 Q1: no reports
2018 Q2: no reports
2018 Q3: no reports
2018 Q4: no reports
2019 Q1: no reports
2019 Q2: no reports
2019 Q3: no reports
2019 Q4: no reports
2020 Q1: no reports
2020 Q2: no reports
2020 Q3: no reports
2020 Q4: no reports
2021 Q1: no reports
2021 Q2: no reports
2021 Q3: no reports
2021 Q4: no reports
2022 Q1: no reports
2022 Q2: no reports
2022 Q3: no reports
2022 Q4: no reports
2023 Q1: no reports
2023 Q2: 1 report
2023 Q3: 1 report

Dated reports, 2016 Q2 to 2023 Q3.

CVEs named in reports

CVE-2023-28252 KEV ransomware

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

30 August 2023

IT threat evolution in Q2 2023

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor IT threat evolution in Q2 2023
19 May 2023

CloudWizard APT: the bad magic story goes on

Malpedia library date Kaspersky fromORKLCCS '25 data

Archived copy on ORKL Detailsfor CloudWizard APT: the bad magic story goes on
15 February 2017

Operation Bugdrop: Cyberx Discovers Large-Scale Cyber-Reconnaissance Operation Targeting Ukrainian Organizations

date in the CCS '25 data CyberX fromORKLCCS '25 data

The link to Mirror on Box failed its last check. Mirror on Box Detailsfor Operation Bugdrop: Cyberx Discovers Large-Scale Cyber-Reconnaissance Operation Targeting Ukrainian Organizations
18 May 2016

Operation Groundbait: Espionage in Ukrainian war zones

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Operation Groundbait: Espionage in Ukrainian war zones
18 May 2016

Operation Groundbait- Espionage in Ukrainian war zones

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Operation Groundbait- Espionage in Ukrainian war zones
17 May 2016

Operation Groundbait:Analysis of a surveillance toolkit

Malpedia library date ESET fromORKL

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Operation Groundbait:Analysis of a surveillance toolkit
17 May 2016

Operation Groundbait:Analysis of a surveillance toolkit

date in the CCS '25 data ESET fromCCS '25 data

The link to Mirror on Box failed its last check. Detailsfor Operation Groundbait:Analysis of a surveillance toolkit

Newest first. Details opens the report in Explore.