- Category
- Targeted, sponsor unknown · Targeted intrusions with no sponsor attributed.
- Origin
- Israel(high confidence)
- Sources
- 3 sources carry it
- Identifier
- GINC-APT-0900 · r00tk1t
IsraelWhat it is
R00TK1T is a hacking group known for sophisticated cyber attacks targeting governmental agencies in Malaysia, including data exfiltration from the National Population and Family Development Board. The group has publicized their successful attacks on social media, showcasing stolen data. R00TK1T has also targeted Malaysian telecom providers, defacing portals and potentially breaching user data.
Attribution
Each attribution is a claim: who makes it, and to whom. Western and Eastern sources are kept apart, as they often disagree.
Western sources
Tools
The tools and malware families the sources tie to it.
- Cyber Eye RAT
- CyberGate
- Hacking Team UEFI Rootkit
Sources
- Malpedia malpedia.caad.fkie.fraunhofer.de