GINC-APT-0946 · Targeted, sponsor unknown

SloppyLemming

Category
Targeted, sponsor unknown · Targeted intrusions with no sponsor attributed.
Origin
Unknown
Sources
3 sources carry it
Identifier
GINC-APT-0946 · sloppylemming

What it is

SloppyLemming is an advanced actor that uses multiple cloud service providers to facilitate different aspects of their activities, such as credential harvesting, malware delivery and command and control (C2). This actor conducts extensive operations targeting Pakistani, Sri Lanka, Bangladesh, and China. Industries targeted include government, law enforcement, energy, telecommunications, and technology entitie

Tools

The tools and malware families the sources tie to it.

  • China Chopper
  • CloudDuke

Sources

  • Malpedia malpedia.caad.fkie.fraunhofer.de