Dust Storm

Also known as: Dust Storm, G0031

Threat actors behind the Operation Dust Storm have been active since at least 2010, the hackers targeted several organizations in Japan, South Korea, the US, Europe, and other Asian countries.

🌍 Country ["China"]
🧭 ATT&CK G0031

Introduction

Threat actors behind the Operation Dust Storm have been active since at least 2010, the hackers targeted several organizations in Japan, South Korea, the US, Europe, and other Asian countries.

Activities and Tactics

Country of Origin: 🇨🇳 [“China”]

Notable Campaigns

Information pending cataloguing.

Tactics, Techniques, and Procedures (TTPs)

Information pending cataloguing.

Notable Indicators of Compromise (IOCs)

No curated IOCs are currently published for this actor. This section will be updated when stable, attributable indicators are available.

Malware and Tools

  • Gh0st RAT:
  • MiS-Type:
  • Misdat:
  • Poison Ivy:
  • S-Type:

Attribution and Evidence

Country of Origin: [“China”] Additional attribution information pending cataloguing.

References

[1] MITRE ATT&CK MITRE ATT&CK entry