APTnotes

APTnotes copied to clipboard

https://github.com/loneicewolf/Agent.btz https://github.com/loneicewolf/fanny.bmp https://github.com/loneicewolf/Stuxnet-Source (If someone would need them?)

loneicewolf

irenad

Cyberespionage against RUAG

1

https://www.govcert.admin.ch/blog/22/technical-report-about-the-ruag-espionage-case [Report_Ruag-Espionage-Case.pdf](https://github.com/kbandla/APTnotes/files/277546/Report_Ruag-Espionage-Case.pdf) Related to Epic/Turla/Tavdig

kbandla

HT ZeroDays

4

http://researchcenter.paloaltonetworks.com/2015/07/apt-group-ups-targets-us-government-with-hacking-team-flash-exploit/ http://blog.trendmicro.com/trendlabs-security-intelligence/an-in-depth-look-at-how-pawn-storms-java-zero-day-was-used/ Indicators UPS a2fe113cc13acac2bb79a375f692b8ba5cc2fa880272adc7ab0d01f839e877ff Domains rpt.perrydale[.]com report.perrydale[.]com IPs 194.44.130[.]179 URLs rpt.perrydale[.]com /en/show.swf report.perrydale[.]com /ema/show.swf rpt.perrydale[.]com /en/b.gif report.perrydale[.]com /ema/b,gif PawnStorm 192[.]111[.]146[.]185 (direct to IP call) www[.]acledit[.]com www[.]biocpl[.]org

chrisddom

Shamoon Attacks

2

http://securelist.com/blog/incidents/57854/shamoon-the-wiper-copycats-at-work/ Need more data or detailed reports

kbandla