GINC Technology
GINC-APT-1161 · State

卢甘斯克组织 - APT-C-46

Also APT-C-46.

Category
State · Attributed to a state or working for one.
Origin
Ukraine(medium confidence)
Sources
2 sources carry it
Identifier
GINC-APT-1161 · apt-c-46

What it is

2019年初，国外安全厂商披露了一起疑似卢甘斯克背景的APT组织针对乌克兰政府的定向攻击活动，根据相关报告分析该组织的攻击活动至少可以追溯到2014年，曾大量通过网络钓鱼、水坑攻击等方式针对乌克兰政府机构进行攻击，在其过去的攻击活动中曾使用过开源Quasar RAT和VERMIN等恶意软件，捕获目标的音频和视频，窃取密码，获取机密文件等等。

Names

The names each vendor, agency and source gives it. Naming differs by who tracks the actor, so one group carries many.

Qihoo 360
APT-C-46

Attribution

Each attribution is a claim: who makes it, and to whom. Western and Eastern sources are kept apart, as they often disagree.

Chinese and Russian sources

Tools

The tools and malware families the sources tie to it.

  • Quasar RAT

Sources