- Category
- Criminal · Financially motivated: ransomware, fraud and theft.
- Origin
- Belarus(high confidence)
- Sources
- 6 sources carry it
- Identifier
- GINC-APT-0284 · cyber-partisans
BelarusWhat it is
The Cyber Partisans, a hacktivist group based in Belarus, has been involved in various cyber-attacks targeting organizations and infrastructure in Belarus and Ukraine. They have hacked and wiped the network of the Belarusian Telegraph Agency, targeted the Belarusian Red Cross, and conducted ransomware attacks on the Belarusian Railway and Belarusian State University. The group aims to expose alleged crimes committed by pro-government organizations and disrupt operations supporting the Russian military operation against Ukraine. They have also leaked stolen data to journalists and expressed support for Ukraine.
Names
The names each vendor, agency and source gives it. Naming differs by who tracks the actor, so one group carries many.
- CrowdStrike
- Partisan Jackal
- Other names
- cpartisans, Cyber-Partisans, Partisan Zmiy, киберпартизаны, Кібер-Партызаны, кіберпартызаны
Attribution
Each attribution is a claim: who makes it, and to whom. Western and Eastern sources are kept apart, as they often disagree.
Western sources
Tools
The tools and malware families the sources tie to it.
- CrossRat
- Cyber Eye RAT
- CyberGate
- GraphicBooting
Sources
- Malpedia malpedia.caad.fkie.fraunhofer.de