Introduction
Cyber Berkut is a threat actor tracked by MISP Galaxy. Additional information pending cataloguing.
Activities and Tactics
Country of Origin: 🇷🇺 Russia
Risk Level: High
Notable Campaigns
- ‘Cyber Berkut’ Hackers Target Major Ukrainian Bank
- 2014-03
- 2014-07
- 2015-01
- 2015-05
- Cyber Berkut Graduates From DDoS Stunts to Purveyor of Cyber Attack Tools
- German government websites
- Nato websites disabled by cyber attack on eve of Crimea vote
- https://www.ft.com/content/b822d5cc-ace6-11e3-8ba3-00144feab7de
- https://www.recordedfuture.com/cyber-berkut-analysis/
- https://www.reuters.com/article/us-germany-cyberattack/pro-russian-group-claims-cyber-attack-on-german-government-websites-idUSKBN0KG15320150107
- https://www.themoscowtimes.com/2014/07/04/cyber-berkut-hackers-target-major-ukrainian-bank-a37033
- including Chancellor Angela Merkel’s page
- shortly before their leaders were to meet.
- were hacked on Wednesday in an attack claimed by a group demanding Berlin end support for the Ukrainian government
Tactics, Techniques, and Procedures (TTPs)
Information pending cataloguing.
Notable Indicators of Compromise (IOCs)
No curated IOCs are currently published for this actor. This section will be updated when stable, attributable indicators are available.
Malware and Tools
Information pending cataloguing.
Attribution and Evidence
Country of Origin: Russia Additional attribution information pending cataloguing.
References
References pending cataloguing.