Operation Potao Express

Reports per quarter

CVEs named in reports

• CVE-2014-1761 KEV
• CVE-2014-4114 KEV

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

1. 10 January 2018

   blog

   file creation date fromORKL

   The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor blog

2. 18 May 2016

   Operation Groundbait: Espionage in Ukrainian war zones

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Operation Groundbait: Espionage in Ukrainian war zones

3. 18 May 2016

   Operation Groundbait- Espionage in Ukrainian war zones

   date in the title fromORKL

   The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Operation Groundbait- Espionage in Ukrainian war zones

4. 30 July 2015

   Operation Potao Express: Analysis Of A Cyber-Espionage Toolkit

   Malpedia library date ESET fromORKLCCS '25 data

   The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Operation Potao Express: Analysis Of A Cyber-Espionage Toolkit

5. 30 July 2015

   Operation Potao Express: Analysis of a cyber-espionage toolkit

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Operation Potao Express: Analysis of a cyber-espionage toolkit

6. 30 July 2015

   Operation Potao Express- Analysis of a cyber‑espionage toolkit

   date in the title fromORKL

   The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Operation Potao Express- Analysis of a cyber‑espionage toolkit

Newest first. Details opens the report in Explore.