TeamSpy Crew
Also reported as Team Bear, Anger Bear, TeamSpy, IRON LYRIC, SIG39 and 1 other name. Linked to Russia by three sources.
Reports per quarter
CVEs named in reports
- CVE-2012-0507 KEV ransomware
- CVE-2016-0099 KEV ransomware
KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.
Reports
-
Threat Group Cards: A Threat Actor Encyclopedia
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Threat Group Cards: A Threat Actor Encyclopedia
-
The Russian SpyAgent – a Decade Later and RAT Tools Remain at Risk
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor The Russian SpyAgent – a Decade Later and RAT Tools Remain at Risk
-
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Putin’s hackers gained full access to Hungary’s foreign ministry networks, the Orbán government has been unable to stop them
-
Updated Karagany Malware Targets Energy Sector
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Updated Karagany Malware Targets Energy Sector
-
Resurgent Iron Liberty Targeting Energy Sector
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Resurgent Iron Liberty Targeting Energy Sector
-
Resurgent Iron Liberty Targeting Energy Sector
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Resurgent Iron Liberty Targeting Energy Sector
-
ukatemicrysys_territorialdispute
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor ukatemicrysys_territorialdispute
Show all 17 reports Show fewer
-
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Operation_Dragonfly_Analysis
-
A deeper look into malware abusing TeamViewer
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor A deeper look into malware abusing TeamViewer
-
The Teamspy Story - Abusing Teamviewer In Cyberespionage Campaigns
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor The Teamspy Story - Abusing Teamviewer In Cyberespionage Campaigns
-
Researchers Uncover ‘TeamSpy’ Attack Campaign Against Government, Research Targets
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Researchers Uncover ‘TeamSpy’ Attack Campaign Against Government, Research Targets
Newest first. Details opens the report in Explore.