- Category
- Criminal · Financially motivated: ransomware, fraud and theft.
- Origin
- Unknown
- Motivation
- Financial crime
- Seen
- 2018
- Sources
- 6 sources carry it
- Identifier
- GINC-APT-0315 · moskalvzapoe
What it is
Moskalvzapoe is a threat actor tracked by MISP Galaxy. Additional information pending cataloguing.
Names
The names each vendor, agency and source gives it. Naming differs by who tracks the actor, so one group carries many.
- CrowdStrike
- Night Spider
- Proofpoint
- TA511
- Other names
- MAN1
Targets
- Countries
- Argentina, Brazil, Canada, Germany, Hong Kong, India, Ireland, Israel, Italy, Japan, Kazakhstan, Lithuania, Malaysia, Netherlands, Russia, Singapore, South Africa, South Korea, Taiwan, Thailand, Türkiye, Ukraine, United Kingdom, United States, Vietnam
Tools
The tools and malware families the sources tie to it.
- Cobalt Strike
- Ficker Stealer
- Hancitor
- NetSupport Manager
Sources
- ETDA Threat Group Card apt.etda.or.th
- Malpedia malpedia.caad.fkie.fraunhofer.de