APT Explorer

All actors

Water Barghest

Reports
8
Last reported
Known CVEs
5
ID
water-barghest
Sources
MISPMalpedia
Merge evidence
1 alias match

Reports per quarter

Dated reports, 2019 Q2 to 2024 Q4.

Techniques seen in the last two years

Show all 13 techniques Show fewer

Counts come from technique IDs in the actor's report text.

CVEs named in reports

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

  1. One sock fits all: The use and abuse of the NSOCKS botnet

    Malpedia library date ORKL

    Archived copy on ORKL Details

  2. Inside Water Barghest’s Rapid Exploit-to-Market Strategy for IoT Devices

    Malpedia library date ORKL

    Archived copy on ORKL Details

  3. Inside Water Barghest’s Rapid Exploit-to-Market Strategy for IoT Devices

    Malpedia library date ORKL

    Archived copy on ORKL Details

  4. Schnelle Exploit-to-Market Strategie für IoT Geräte

    Malpedia library date ORKL

    Archived copy on ORKL Details

  5. Ngioweb Remains Active 7 Years Later

    Malpedia library date ORKL

    Archived copy on ORKL Details

  6. Router Roulette: Cybercriminals and Nation-States Sharing Compromised Networks

    Malpedia library date ORKL

    Archived copy on ORKL Details

  7. Quick update on the Linux.Ngioweb botnet, now it is going after IoT devices

    Malpedia library date ORKL

    Archived copy on ORKL Details

  8. An Analysis of Linux.Ngioweb Botnet

    Malpedia library date ORKL

    Archived copy on ORKL Details

Newest first. Details opens the report in Explore.