SNOWGLOBE
Also reported as Snowglobe, Animal Farm, ATK8, SIG20 and ATK 8. Linked to France by three sources.
Reports per quarter
CVEs named in reports
- CVE-2010-0232 KEV
- CVE-2010-4398 KEV
- CVE-2011-2462 KEV
- CVE-2011-3402 KEV
- CVE-2011-4369
- CVE-2012-0158 KEV ransomware
- CVE-2014-0515
- CVE-2014-1761 KEV
- CVE-2015-2360 KEV
- CVE-2015-5119 KEV
KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.
Reports
-
ukatemicrysys_territorialdispute
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor ukatemicrysys_territorialdispute
-
Analysing a 10-Year-Old SNOWBALL
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Analysing a 10-Year-Old SNOWBALL
-
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Remsec driver analysis
-
Know Your Enemies 2.0: A Primer on Advanced Persistent Threat Groups
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Know Your Enemies 2.0: A Primer on Advanced Persistent Threat Groups
Show all 25 reports Show fewer
-
Animal Farm APT and the Shadow of French Intelligence
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Animal Farm APT and the Shadow of French Intelligence
-
Dino: The Latest Spying Malware From An Allegedly French Espionage Group Analyzed
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Dino: The Latest Spying Malware From An Allegedly French Espionage Group Analyzed
-
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Babar_or_Bunny
-
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Animals in the APT Farm
-
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Animals in the APT Farm
-
Babar: Suspected Nation State Spyware In The Spotlight - Cyphort
The title opens Wayback Machine, not the publisher’s page. Archived copy on ORKL Detailsfor Babar: Suspected Nation State Spyware In The Spotlight - Cyphort
-
Babar- espionage software finally found and put under the microscope
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Babar- espionage software finally found and put under the microscope
-
Meet Babar, a New Malware Almost Certainly Created by France
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Meet Babar, a New Malware Almost Certainly Created by France
-
Babar: espionage software finally found and put under the microscope
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Babar: espionage software finally found and put under the microscope
-
EvilBunny: Malware Instrumented By Lua - Cyphort
The title opens Wayback Machine, not the publisher’s page. Archived copy on ORKL Detailsfor EvilBunny: Malware Instrumented By Lua - Cyphort
-
Analyzing CVE-2011-4369 – Part One
The title opens Wayback Machine, not the publisher’s page. Archived copy on ORKL Detailsfor Analyzing CVE-2011-4369 – Part One
Newest first. Details opens the report in Explore.