Trusted Design

Sofacy Recycles Carberp and Metasploit Code

概要

The Sofacy Group (also known as Pawn Storm or APT28) is well known for deploying zero-day exploits in their APT campaigns. For example, two recent zero-days used by the Sofacy Group were exploiting vulnerabilities in Microsoft Office CVE-2015-2424 and Java CVE-2015-2590. If the exploit is successful, it installs a Sofacy downloader component, which is different from what we have seen before. This downloader was based on the notorious Carberp source code, which leaked out into the public domain in the summer of 2013.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• Sofacy APT hits high profile targets (score: 0.71)
• Pawn Storm’s using Java Zero-Day (score: 0.62)
• New Sofacy Attacks Against US Government Agency (score: 0.61)
• Sofacy APT hits high profile targets with updated toolset (score: 0.59)
• 20160212B: Sofacy’s Linux Backdoor (score: 0.57)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る