Introduction
This threat actor targets critical infrastructure entities in the oil and gas sector, primarily in Ukraine. The threat actors deploy the BugDrop malware to remotely access the microphones in their targets’ computers to eavesdrop on conversations.
Activities and Tactics
Targeted Sectors: Private sector
Country of Origin: 🇷🇺 Russia
Risk Level: High
First Seen: 2017
Last Activity: 2017
Incident Type: Espionage
Suspected Victims: Ukraine, Austria, Russia, Saudi Arabia
Notable Campaigns
Information pending cataloguing.
Tactics, Techniques, and Procedures (TTPs)
Information pending cataloguing.
Notable Indicators of Compromise (IOCs)
No atomic indicators are listed in this profile. The APTnotes snapshot indexes 1 public reports that may contain IOCs; see Source Attribution for dataset links.
Malware and Tools
- RemoteCMD
- Remote Utilities
- RemotePC
Attribution and Evidence
Country of Origin: Russia Additional attribution information pending cataloguing.
References
References pending cataloguing.