GINC-APT-0477 · Targeted, sponsor unknown

WildCard

Category
Targeted, sponsor unknown · Targeted intrusions with no sponsor attributed.
Origin
Unknown
Motivation
Information theft and espionage
Seen
2021
Sources
5 sources carry it
Identifier
GINC-APT-0477 · wildcard

What it is

Wildcard is a threat actor that initially targeted Israel's educational sector with the SysJoker malware. They have since expanded their operations and developed additional malware variants, disguised as legitimate software, including one written in the Rust programming language called RustDown. Their precise identity remains unknown, but they have shown advanced capabilities and a focus on critical sectors within Israel.

Targets

Countries
Israel
Sectors
Education, Industrial

Tools

The tools and malware families the sources tie to it.

  • RustDown
  • SysJoker
  • Unknown Logger

Sources