APT Archives - Unit 42

A pictorial representation of threat actor tracking showing a blackboard and books.

1,147

people reacted

すべては名のなかに: Unit 42による脅威攻撃者の定義・追跡手法

By Unit 42
May 15, 2023 at 6:00 AM

0

< 1 min. read

A pictorial representation of Alloy Taurus with a bull's head against the Taurus constellation in a night sky.

2,085

people reacted

中国サイバー攻撃グループAlloy TaurusによるPingPullマルウェアに新たな亜種

By Unit 42
April 26, 2023 at 6:27 PM

0

2 min. read

A pictorial representation of the threat actor group Playful Taurus showing an illustration of an orange bull’s head against the background of a blue night sky. Included is the constellation of Taurus.

2,793

people reacted

中国の持続的標的型攻撃グループPlayful Taurusによるイランでの活動

By Unit 42
January 18, 2023 at 11:19 PM

0

3 min. read

ロシアのAPT29ハッカーがオンラインストレージサービスのDropBoxとGoogle Driveを悪用

3,403

people reacted

ロシアのAPT29ハッカーがオンラインストレージサービスのDropBoxとGoogle Driveを悪用

By Mike Harbison and Peter Renals
July 26, 2022 at 1:34 AM

0

5 min. read

A conceptual image representing threat groups, used to represent a discussion of threat group naming systems.

2,319

people reacted

Unit 42の脅威グループの命名方法の更新

By Ryan Olson
July 21, 2022 at 10:41 PM

0

< 1 min. read

GALLIUM、新ツールPingPullで通信・政府・金融業種へ標的を拡大

4,582

people reacted

GALLIUM、新ツールPingPullで通信・政府・金融業種へ標的を拡大

By Unit 42
June 13, 2022 at 3:00 AM

0

3 min. read

A conceptual image representing cybercrime, such as the SockDetour backdoor being tracked by Unit 42 in conjunction with the TiltedTemple campaign.

4,141

people reacted

SockDetour: 米国防衛関連企業をひそかに狙うファイルレス・ソケットレスのバックドア

By Unit 42
February 24, 2022 at 6:00 AM

0

2 min. read

A bear trap accompanied by symbols associated with Russia and Ukraine come together to form a conceptual image for Russia's Gamaredon, aka Primitive Bear, an APT targeting Ukraine.

6,065

people reacted

[2022-12-01更新] ウクライナを標的に活動を強めるロシアGamaredon (別名Primitive Bear)APTグループ

By Unit 42
February 4, 2022 at 1:02 AM

0

4 min. read

A conceptual image representing DNS security, such as the strategically aged domain detection system discussed here.

5,672

people reacted

戦略的熟成ドメインの検出: DNSトラフィックの傾向から捕捉するAPT攻撃

By Zhanhao Chen, Daiping Liu, Wanjin Li and Jielong Xu
December 29, 2021 at 6:00 AM

1

2 min. read

A conceptual image symbolizing cybercrime and the use of backdoors, such as the activity we observed in an APT's TiltedTemple Campaign against ManageEngine ServiceDesk Plus, as discussed here.

7,604

people reacted

APT攻撃グループ ManageEngine への攻撃をさらに拡大 ServiceDesk Plus も攻撃の対象に

By Robert Falcone and Peter Renals
December 2, 2021 at 6:00 AM

1

2 min. read

A conceptual image representing cybercrime, such as the use of the NGLite backdoor described here and the KdcSponge credential-stealing tool.

11,397

people reacted

ManageEngine ADSelfService Plusに対する標的型攻撃キャンペーンで防衛関連企業など機密情報を扱う産業分野が被害を受けたことが判明

By Jeff White, Peter Renals and Robert Falcone
November 7, 2021 at 11:58 PM

0

5 min. read

3,767

people reacted

脅威に関する情報: イラン関連サイバー攻撃オペレーション

By Unit 42
January 13, 2020 at 10:07 PM

0

< 1 min. read