-
Gorgon Group Apt, Technical analysis on some of the attacks as well as attribution links with Pakistan actors have been already depicted by 360 and Tuisec, in which they found interesting connections to a larger group of attackers Unit 42 researchers have been tracking, which we are calling Gorgon Group. Aug 2, 2018 · Starting in February 2018, Palo Alto Networks Unit 42 identified a campaign of attacks performed by members of Gorgon Group targeting governmental organizations in the United Kingdom, Spain, Russia, and the United States. Apr 29, 2020 · 前言 之前在日常样本运营中，发现了一个以巴西乐队命名的攻击文档和钓鱼邮件，并在随后的关联分析中发现，此次攻击活动疑似来自一个名为Gorgon的攻击组织，而Gorgon是一个被认为来自南亚某国家的攻击组织，PAN公司的Unit42团队将该攻击活动命名为Aggah。 Feb 24, 2022 · 引言 APT-C-58（Gorgon Group）组织疑似具有巴基斯坦国家民族背景或与巴基斯坦有联系的国家民族背景。该组织实施了网络犯罪和有针对性的网络攻击，包括针对英国、西班牙、俄罗斯和美国的政府 Mar 17, 2022 · 二. Chiefly, Elder Game is working on environmental are (“to get the game’s art up to ‘Skyrim quality'” with assets and consistency APT-C-56（透明部落）利用外贸链接伪装文档攻击分析 APT-C-56（透明部落）近期最新攻击分析与关联疑似Gorgon Group攻击事件分析预警 透明部落利用新冠疫苗热点对印度医疗行业的定向攻击活动分析 APT-C-56（透明部落）伪装印度国防部邮件攻击的跟踪简报. Aug 16, 2025 · Starting in February 2018, Palo Alto Networks Unit 42 identified a campaign of attacks performed by members of Gorgon Group targeting governmental organizations in the United Kingdom, Spain, Russia, and the United States. This late 2021 campaign leverage an in-memory-infection chain to drop the AgentTesla malware on the infected computer, initiated by some phishing emails. 关联Shoot行动分析 近期我们捕获了一批针对印度的样本，其最终释放NetwireRAT，NetwireRAT是开源的商业RAT软件，但是也已经被一些APT组织使用，例如 APT33 和 Gorgon，Gorgon Group 是一个由疑似巴基斯坦或与巴基斯坦有其他联系的成员组成。 网络威胁 短链接 Gorgon Group自2019年6月开始使用了短链接，可以在此地图中按位置查看。 C2域名 可以注意到可以解析用作C2联系人的所有域。 在第二次，如果报告所有域名以查看是否在WHOIS中注册了该域名，再次注意到某些域名未被注册并用作虚假域名。 May 4, 2026 · “The launch rush has finally settled, and we’re working on new stuff!” Project Gorgon’s Eric Heimburg announced bright and early this morning, and he came prepared with a list of good news and some maybe not so good news for some players of the game. Oct 17, 2018 · The group has performed a mix of criminal and targeted attacks, including campaigns against government organizations in the United Kingdom, Spain, Russia, and the United States. They are known for complex and sustained cyber-attacks against specific targets and often have significant resources, typically backed by nation-states or organized crime entities, and pose a continuous risk Actor Details Primary Name The Gorgon Group Known Aliases Gorgon Group, Subaat, ATK92, G0078, Pasty Gemini Data Source Precursor Intelligence Jan 12, 2022 · All of the IOCs are available here. BreachHQ Threat Actors and APT Groups Threat Actors and APT Groups This page provides a list of all known cyber threat actors also referred to as malicious actors, APT groups or hackers. w746sj, geznm, hmtr, yviyc1m, ue, tyc, duavqmtv, avna, gxaxk, 2dm,