CNconfidence: 50

NitroNitro

Also known as: Covert Grove · Nitro

Origin
CN
Known aliases
2
Attribution
50

Profile

These attackers were the subject of an extensive report by Symantec in 2011, which termed the attackers Nitro and stated: 'The goal of the attackers appears to be to collect intellectual property such as design documents, formulas, and manufacturing processes. In addition, the same attackers appear to have a lengthy operation history including attacks on other industries and organizations. Attacks on the chemical industry are merely their latest attack wave. As part of our investigations, we were also able to identify and contact one of the attackers to try and gain insights into the motivations behind these attacks.' Palo Alto Networks reported on continued activity by the attackers in 2014.

Aliases· 2

Covert GroveNitro

References

  1. https://paper.seebug.org/papers/APT/APT_CyberCriminal_Campagin/2011/the_nitro_attacks.pdf
  2. https://unit42.paloaltonetworks.com/new-indicators-compromise-apt-group-nitro-uncovered/
  3. https://blog.trendmicro.com/trendlabs-security-intelligence/the-significance-of-the-nitro-attacks/

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Actor
TERBIUM
Actor
NOTROBIN
Actor
BRONZE VAPOR
Actor
Volatile Cedar
Actor
WildNeutron
Actor
Avivore
Sourced from MISP-Galaxy Threat Actor cluster. Curated by Adam Lundqvist, Founder at SQUR.