GINC-APT-0643 · Targeted, sponsor unknown

BadRory

Category
Targeted, sponsor unknown · Targeted intrusions with no sponsor attributed.
Origin
Unknown
Sources
3 sources carry it
Identifier
GINC-APT-0643 · badrory

What it is

Kaspersky researchers have identified a new APT group named BadRory that has mounted two waves of spear-phishing attacks against Russian organizations. The campaigns took place in October 2022 and April 2023 and leveraged boobytrapped Office emails. Targets included government entities, military contractors, universities, and hospitals.

Tools

The tools and malware families the sources tie to it.

  • Archelaus Beta

Sources

  • Malpedia malpedia.caad.fkie.fraunhofer.de