GINC-APT-0260 · Targeted, sponsor unknown

WildPressure

Also WilePressure.

Category
Targeted, sponsor unknown · Targeted intrusions with no sponsor attributed.
Origin
Unknown
Motivation
Information theft and espionage
Seen
2019
Sources
7 sources carry it
Identifier
GINC-APT-0260 · wildpressure

What it is

WildPressure is a threat actor that targets industrial-related entities in the Middle East. They use a variety of programming languages, including C++, VBScript, and Python, to develop their malware. They have been observed using virtual private servers and compromised servers, particularly WordPress websites, in their infrastructure. While there are some minor similarities with other threat actors in the region, there is not enough evidence to make any attribution.

Names

The names each vendor, agency and source gives it. Naming differs by who tracks the actor, so one group carries many.

Other names
WilePressure

Targets

Sectors
Industrial, Oil and gas

Tools

The tools and malware families the sources tie to it.

  • Milum

Sources