MA

KasablankaKasablanka

Also known as: Kasablanka

Origin
MA
Known aliases
1

Profile

The Kasablanka group is a cyber-criminal organization that has specifically targeted Russia between September and December 2022, using various payloads delivered through phishing emails containing socially engineered lnk files, zip packages, and executables attached to virtual disk image files.

Aliases· 1

Kasablanka

References

  1. https://blog.talosintelligence.com/yorotrooper-espionage-campaign-cis-turkey-europe/
  2. https://www.welivesecurity.com/2021/09/07/bladehawk-android-espionage-kurdish/
  3. https://blog.talosintelligence.com/get-a-loda-this/

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Actor
RuskiNet
Actor
RedStinger
Actor
People's Cyber Army of Russia
Actor
Mythic Likho
Software
Katyusha
Group
Turla
Sourced from MISP-Galaxy Threat Actor cluster. Curated by Adam Lundqvist, Founder at SQUR.