Operation “Daybreak”

ThaiCERT Threat Group Cards

Operation “Daybreak” Target: High profile victims. Method: Previously unknown (0-day) Adobe Flash Player exploit. It is also possible that the group deployed another zero day exploit, CVE-2016-0147, which was patched in April. https://securelist.com/operation-daybreak/75100/ Note: not the same operation as {{DarkHotel}}’s Operation “Daybreak”.

Hackmageddon cyber attacks timelines (Paolo Passeri)

Kaspersky Lab reveals the details of Operation Daybreak, a campaign carried on by an APT group called ScarCruft, and targeting victims in Russia, Nepal, South Korea, China, India, Kuwait and Romania.

Kaspersky Securelist

We caught another zero-day Adobe Flash Player exploit deployed in targeted attacks. We believe these attacks are launched by an APT Group we call “ScarCruft”.

ScarCruft is a relatively new APT group; victims have been observed in Russia, Nepal, South Korea, China, India, Kuwait and Romania.