Trusted Design

Operation RussianDoll

概要

FireEye Labs recently detected a limited APT campaign exploiting zero-day vulnerabilities in Adobe Flash and a brand-new one in Microsoft Windows. Using the Dynamic Threat Intelligence Cloud (DTI), FireEye researchers detected a pattern of attacks beginning on April 13th, 2015. Adobe independently patched the vulnerability (CVE-2015-3043) in APSB15-06. Through correlation of technical indicators and command and control infrastructure, FireEye assess that APT28 is probably responsible for this activity.

Created: 2026-02-23

Indicators

類似Pulses

Multiple Chinese APT Groups Quickly Use Flash Zero-Day (score: 0.76)
EPS Processing Zero-Days Exploited by Multiple Threat Actors (score: 0.71)
Operation Clandestine Wolf – Adobe Flash Zero-Day APT3 Phishing (score: 0.70)
APT Group Wekby Leveraging Adobe Flash Exploit (score: 0.69)
Killing a Zero-Day in the Egg: Adobe CVE-2016-1019 (score: 0.69)

このPulseに関連する脅威アクター (事実ベース)

Kimsuky

Score: 9.51

Matched TTPs:

T1587.001 - Malware
T1588.005 - Exploits
T1102.001 - Dead Drop Resolver

MITREへのリンク →

Moonstone Sleet

Score: 4.49

Matched TTPs:

T1587.001 - Malware
T1569.002 - Service Execution

MITREへのリンク →

Lazarus Group

Score: 3.59

Matched TTPs:

T1587.001 - Malware
T1203 - Exploitation for Client Execution

MITREへのリンク →

Contagious Interview

Score: 6.23

Matched TTPs:

T1587.001 - Malware
T1681 - Search Threat Vendor Data

MITREへのリンク →

OilRig

Score: 6.74

Matched TTPs:

T1587.001 - Malware
T1027.005 - Indicator Removal from Tools
T1203 - Exploitation for Client Execution

MITREへのリンク →

UNC3886

Score: 10.87

Matched TTPs:

T1587.001 - Malware
T1681 - Search Threat Vendor Data
T1027.005 - Indicator Removal from Tools
T1203 - Exploitation for Client Execution

MITREへのリンク →

Sandworm Team

Score: 7.43

Matched TTPs:

T1587.001 - Malware
T1588.006 - Vulnerabilities
T1203 - Exploitation for Client Execution

MITREへのリンク →

APT29

Score: 10.36

Matched TTPs:

T1587.001 - Malware
T1550.003 - Pass the Ticket
T1203 - Exploitation for Client Execution
T1078.004 - Cloud Accounts

MITREへのリンク →

Aoqin Dragon

Score: 3.59

Matched TTPs:

T1587.001 - Malware
T1203 - Exploitation for Client Execution

MITREへのリンク →

Turla

Score: 5.25

Matched TTPs:

T1587.001 - Malware
T1027.005 - Indicator Removal from Tools

MITREへのリンク →

Ke3chang

Score: 7.42

Matched TTPs:

T1587.001 - Malware
T1569.002 - Service Execution
T1078.004 - Cloud Accounts

MITREへのリンク →

Mustang Panda

Score: 6.34

Matched TTPs:

T1587.001 - Malware
T1203 - Exploitation for Client Execution
T1518 - Software Discovery

MITREへのリンク →

FIN7

Score: 4.49

Matched TTPs:

T1587.001 - Malware
T1569.002 - Service Execution

MITREへのリンク →

Volt Typhoon

Score: 6.59

Matched TTPs:

T1588.006 - Vulnerabilities
T1518 - Software Discovery

MITREへのリンク →

Storm-0501

Score: 6.77

Matched TTPs:

T1588.006 - Vulnerabilities
T1078.004 - Cloud Accounts

MITREへのリンク →

APT32

Score: 7.74

Matched TTPs:

T1550.003 - Pass the Ticket
T1203 - Exploitation for Client Execution
T1569.002 - Service Execution

MITREへのリンク →

BRONZE BUTLER

Score: 11.37

Matched TTPs:

T1550.003 - Pass the Ticket
T1203 - Exploitation for Client Execution
T1518 - Software Discovery
T1102.001 - Dead Drop Resolver

MITREへのリンク →

Patchwork

Score: 7.93

Matched TTPs:

T1027.005 - Indicator Removal from Tools
T1203 - Exploitation for Client Execution
T1102.001 - Dead Drop Resolver

MITREへのリンク →

Deep Panda

Score: 3.15

Matched TTPs:

T1027.005 - Indicator Removal from Tools

MITREへのリンク →

GALLIUM

Score: 3.15

Matched TTPs:

T1027.005 - Indicator Removal from Tools

MITREへのリンク →

APT3

Score: 4.65

Matched TTPs:

T1027.005 - Indicator Removal from Tools
T1203 - Exploitation for Client Execution

MITREへのリンク →

Sidewinder

Score: 4.24

Matched TTPs:

T1203 - Exploitation for Client Execution
T1518 - Software Discovery

MITREへのリンク →

APT28

Score: 13.09

Matched TTPs:

T1203 - Exploitation for Client Execution
T1498 - Network Denial of Service
T1078.004 - Cloud Accounts
T1211 - Exploitation for Defense Evasion

MITREへのリンク →

Axiom

Score: 6.03

Matched TTPs:

T1203 - Exploitation for Client Execution
T1001.002 - Steganography

MITREへのリンク →

Tropic Trooper

Score: 4.24

Matched TTPs:

T1203 - Exploitation for Client Execution
T1518 - Software Discovery

MITREへのリンク →

Inception

Score: 4.24

Matched TTPs:

T1203 - Exploitation for Client Execution
T1518 - Software Discovery

MITREへのリンク →

APT41

Score: 7.18

Matched TTPs:

T1203 - Exploitation for Client Execution
T1569.002 - Service Execution
T1102.001 - Dead Drop Resolver

MITREへのリンク →

Ember Bear

Score: 5.63

Matched TTPs:

T1203 - Exploitation for Client Execution
T1588.005 - Exploits

MITREへのリンク →

APT33

Score: 4.42

Matched TTPs:

T1203 - Exploitation for Client Execution
T1078.004 - Cloud Accounts

MITREへのリンク →

MuddyWater

Score: 4.24

Matched TTPs:

T1203 - Exploitation for Client Execution
T1518 - Software Discovery

MITREへのリンク →

Mustard Tempest

Score: 4.54

Matched TTPs:

T1608.006 - SEO Poisoning

MITREへのリンク →

Velvet Ant

Score: 6.53

Matched TTPs:

T1569.002 - Service Execution
T1211 - Exploitation for Defense Evasion

MITREへのリンク →

Rocke

Score: 3.29

Matched TTPs:

T1102.001 - Dead Drop Resolver

MITREへのリンク →

RTM

Score: 3.29

Matched TTPs:

T1102.001 - Dead Drop Resolver

MITREへのリンク →

このPulseに関連する脅威アクター (推論ベース)

APT28

Score: 0.87

Matched TTPs:

T1078.004 - Cloud Accounts
T1203 - Exploitation for Client Execution
T1498 - Network Denial of Service
T1211 - Exploitation for Defense Evasion

MITREへのリンク →

UNC3886

Score: 0.73

Matched TTPs:

T1027.005 - Indicator Removal from Tools
T1203 - Exploitation for Client Execution
T1681 - Search Threat Vendor Data
T1587.001 - Malware

MITREへのリンク →

BRONZE BUTLER

Score: 0.69

Matched TTPs:

T1518 - Software Discovery
T1203 - Exploitation for Client Execution
T1550.003 - Pass the Ticket
T1102.001 - Dead Drop Resolver

MITREへのリンク →

APT29

Score: 0.68

Matched TTPs:

T1078.004 - Cloud Accounts
T1203 - Exploitation for Client Execution
T1550.003 - Pass the Ticket
T1587.001 - Malware

MITREへのリンク →

Kimsuky

Score: 0.60

Matched TTPs:

T1588.005 - Exploits
T1102.001 - Dead Drop Resolver
T1587.001 - Malware

MITREへのリンク →

APT32

Score: 0.58

Matched TTPs:

T1569.002 - Service Execution
T1203 - Exploitation for Client Execution
T1550.003 - Pass the Ticket

MITREへのリンク →

Related CVEs

Pulse – 脅威アクターグラフ

← Pulse一覧に戻る