MITRE ATT&CKgroup
G0055 NEODYMIUM
- Domain
- enterprise
- Version
- 1.0
- Created
- 2018-01-16
Description
NEODYMIUM is an activity group that conducted a campaign in May 2016 and has heavily targeted Turkish victims. The group has demonstrated similarity to another activity group called PROMETHIUM due to overlapping victim and campaign characteristics. NEODYMIUM is reportedly associated closely with BlackOasis operations, but evidence that the group names are aliases has not been identified.
Related
Uses · MITRE ATT&CK (1)
- S0176 Wingbird software (malware)
References
- https://blogs.technet.microsoft.com/mmpc/2016/12/14/twin-zero-day-attacks-promethium-and-neodymium-target-individuals-in-europe/ Microsoft NEODYMIUM Dec 2016
- http://download.microsoft.com/download/E/B/0/EB0F50CC-989C-4B66-B7F6-68CD3DC90DE3/Microsoft_Security_Intelligence_Report_Volume_21_English.pdf Microsoft SIR Vol 21
- https://www.cyberscoop.com/middle-eastern-hacking-group-using-finfisher-malware-conduct-international-espionage/ CyberScoop BlackOasis Oct 2017