- Category
- Targeted, sponsor unknown · Targeted intrusions with no sponsor attributed.
- Origin
- Unknown
- Sources
- 5 sources carry it
- Identifier
- GINC-APT-0424 · murenshark
What it is
MurenShark is an advanced persistent threat group that operates primarily in the Middle East, with a focus on targeting Turkey. They have shown interest in military projects, as well as research institutes and universities. This group is highly skilled in counter-analysis and reverse traceability, using sophisticated tactics to avoid detection. They utilize compromised websites as file servers and command and control servers, and have been known to use attack tools like NiceRender for phishing purposes.
Names
The names each vendor, agency and source gives it. Naming differs by who tracks the actor, so one group carries many.
- Other names
- Actor210426
Tools
The tools and malware families the sources tie to it.
- Killer RAT
- SharK
Sources
- Malpedia malpedia.caad.fkie.fraunhofer.de