DustSquad
DustSquad is classified as state-sponsored.
- Origin
- Russia
- Also known as
- 1
Prodaft researchers have published a report on Paperbug, a cyber-espionage campaign carried out by suspected Russian-speaking group Nomadic Octopus and which targeted entities in Tajikistan. According to Prodaft, known compromised victims included high-ranking government officials, telcos, and public service infrastructures. Compromised devices also included OT devices, besides your typical computers, servers, and mobile devices. In typical Prodaft fashion, the company also gained access to one of the group's C&C server backend panels.
The group's reported origin is Russia.
Also known as: Nomadic Octopus
Published reports on this actor:
- https://securelist.com/octopus-infested-seas-of-central-asia/88200/
- https://www.prodaft.com/m/reports/PAPERBUG_TLPWHITE-1.pdf
- https://www.virusbulletin.com/conference/vb2018/abstracts/nomadic-octopus-cyber-espionage-central-asia/
Source: MISP Galaxy, Malpedia.
Is your organization mentioned?
Search with your domain to check whether your organization appears in ransomware listings, leaked records, forums and Telegram channels.
Search your domainThreat Intelligence
Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.