GINC-APT-0482 · Tracked, unattributed

Actor240524

Category
Tracked, unattributed · A vendor’s working cluster, not yet attributed.
Origin
Unknown
Sources
4 sources carry it
Identifier
GINC-APT-0482 · actor240524

What it is

Actor240524 is a newly identified APT group that targeted Azerbaijani and Israeli diplomats through spear-phishing emails to steal sensitive data. The group employs a Trojan program known as ABCloader and ABCsync, demonstrating capabilities to steal secrets and modify file data. Their operations appear to focus on undermining the cooperative relationship between Azerbaijan and Israel. Actor240524 utilizes various countermeasures to obscure their attack tactics and techniques.

Tools

The tools and malware families the sources tie to it.

  • Trojan.Karagany
  • Trojan.Mebromi

Sources

  • Malpedia malpedia.caad.fkie.fraunhofer.de