GINC-APT-0424 · Targeted, sponsor unknown

MurenShark

Also Actor210426.

Category
Targeted, sponsor unknown · Targeted intrusions with no sponsor attributed.
Origin
Unknown
Sources
5 sources carry it
Identifier
GINC-APT-0424 · murenshark

What it is

MurenShark is an advanced persistent threat group that operates primarily in the Middle East, with a focus on targeting Turkey. They have shown interest in military projects, as well as research institutes and universities. This group is highly skilled in counter-analysis and reverse traceability, using sophisticated tactics to avoid detection. They utilize compromised websites as file servers and command and control servers, and have been known to use attack tools like NiceRender for phishing purposes.

Names

The names each vendor, agency and source gives it. Naming differs by who tracks the actor, so one group carries many.

Other names
Actor210426

Tools

The tools and malware families the sources tie to it.

  • Killer RAT
  • SharK

Sources

  • Malpedia malpedia.caad.fkie.fraunhofer.de