GINC-APT-0652 · Tracked, unattributed

BlackMaskers

Also BlackMaskers Team.

Category
Tracked, unattributed · A vendor’s working cluster, not yet attributed.
Origin
Unknown
Sources
3 sources carry it
Identifier
GINC-APT-0652 · blackmaskers

What it is

BlackMaskers Team has emerged as a significant threat actor, particularly targeting Jordan amid the Israel-Iran conflict. They have claimed responsibility for cyberattacks on critical Jordanian entities, including the stock exchange and private sector enterprises, leveraging techniques such as website defacement and data breaches. Their operations have raised concerns about the vulnerability of national infrastructure. Additionally, they have successfully hacked Saudi Arabian web platforms, further demonstrating their capabilities.

Names

The names each vendor, agency and source gives it. Naming differs by who tracks the actor, so one group carries many.

Other names
BlackMaskers Team

Tools

The tools and malware families the sources tie to it.

  • Arabian-Attacker RAT
  • BLACKCOFFEE
  • BlackEnergy
  • BlackHole
  • BlackNix
  • Blackshades
  • Cyber Eye RAT
  • CyberGate

Sources

  • Malpedia malpedia.caad.fkie.fraunhofer.de