FRFranceconfidence: 50
SNOWGLOBESNOWGLOBE
Also known as: Animal Farm · Snowglobe · ATK8
Origin
FR
Known aliases
3
Target sectors
2
Attribution
State-sponsored
Profile
In 2014, researchers at Kaspersky Lab discovered and reported on three zero-days that were being used in cyberattacks in the wild. Two of these zero-day vulnerabilities are associated with an advanced threat actor we call Animal Farm. Over the past few years, Animal Farm has targeted a wide range of global organizations. The group has been active since at least 2009 and there are signs that earlier malware versions were developed as far back as 2007.
Aliases· 3
Animal FarmSnowglobeATK8
Target sectors· 2
GovernmentPrivate sector
Known victims· 15
- Syria
- United States
- Netherlands
- Russia
- Spain
- Iran
- China
- Germany
- Algeria
- Norway
- Malaysia
- Turkey
References
- https://securelist.com/blog/research/69114/animals-in-the-apt-farm/
- https://motherboard.vice.com/read/meet-babar-a-new-malware-almost-certainly-created-by-france
- https://web.archive.org/web/20150311013500/http://www.cyphort.com/evilbunny-malware-instrumented-lua/
- https://web.archive.org/web/20150218192803/http://www.cyphort.com/babar-suspected-nation-state-spyware-spotlight/
- https://www.gdatasoftware.com/blog/2015/02/24270-babar-espionage-software-finally-found-and-put-under-the-microscope
- https://www.cfr.org/interactive/cyber-operations/snowglobe
- https://resources.infosecinstitute.com/animal-farm-apt-and-the-shadow-of-france-intelligence/
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.