Multiple Targets

Date (as written): 29/05/2018
Year: 2018
Country: US
Actors (as written): Hidden Cobra
Actor pages: Hidden Cobra
Tags (as written): Attack: Targeted Attack; Target Class: Y Multiple Industries; Attack Class: CE

Source entries (2)

CISA/DHS/FBI alert TA18-149A (HIDDEN COBRA – Joanap and Brambul)

Joanap compromised nodes (87) in listed countries · 2018-05-29

The countries in which the infected IP addresses are registered are as follows: Argentina Belgium Brazil Cambodia China Colombia Egypt India Iran Jordan Pakistan Saudi Arabia Spain Sri Lanka Sweden Taiwan Tunisia

https://www.cisa.gov/news-events/alerts/2018/05/29/hidden-cobra-joanap-backdoor-trojan-and-brambul-server-message-block-worm

Hackmageddon cyber attacks timelines (Paolo Passeri)

Multiple Targets · 29/05/2018

The FBI and Department of Homeland Security jointly release two technical alerts via the US-CERT, warning of two malware families dating back to at least 2009 that they say are tied to the suspected North Korea-sponsored APT group Hidden Cobra. The two malware families are the remote access tool (RAT) Joanap and the Server Message Block-based (SMB) worm Brambul.

https://www.hackmageddon.com/2018/06/26/16-31-may-2018-cyber-attacks-timeline/

https://www.scmagazine.com/fbi-dhs-share-intel-on-rat-and-worm-linked-to-north-korea/article/769583/

Suggest a correction on GitHub