IRconfidence: 50

GreenbugGreenbug

Also known as: Greenbug

Origin
IR
Known aliases
1
Attribution
50

Profile

Greenbug is a Iranian-attributed threat actor catalogued by MISP-Galaxy (MISP-Galaxy v341). Original record: Greenbug was discovered targeting a range of organizations in the Middle East including companies in the aviation, energy, government, investment, and education sectors.

Aliases· 1

Greenbug

References

  1. https://web.archive.org/web/20190331181353/https://www.symantec.com/connect/blogs/greenbug-cyberespionage-group-targeting-middle-east-possible-links-shamoon
  2. https://unit42.paloaltonetworks.com/unit42-oilrig-uses-ismdoor-variant-possibly-linked-greenbug-threat-group/
  3. https://threatpost.com/shamoon-collaborator-greenbug-adopts-new-communication-tool/125383/
  4. https://www.clearskysec.com/greenbug/

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Actor
GreenSpot
Group
Leafminer
Actor
Sowbug
Actor
Thrip
Actor
GreyEnergy
Actor
Flying Kitten
Sourced from MISP-Galaxy Threat Actor cluster. Curated by Adam Lundqvist, Founder at SQUR.