- Category
- Tracked, unattributed · A vendor’s working cluster, not yet attributed.
- Origin
- Unknown
- Sources
- 4 sources carry it
- Identifier
- GINC-APT-0482 · actor240524
What it is
Actor240524 is a newly identified APT group that targeted Azerbaijani and Israeli diplomats through spear-phishing emails to steal sensitive data. The group employs a Trojan program known as ABCloader and ABCsync, demonstrating capabilities to steal secrets and modify file data. Their operations appear to focus on undermining the cooperative relationship between Azerbaijan and Israel. Actor240524 utilizes various countermeasures to obscure their attack tactics and techniques.
Tools
The tools and malware families the sources tie to it.
- Trojan.Karagany
- Trojan.Mebromi
Sources
- Malpedia malpedia.caad.fkie.fraunhofer.de