Animal Farm

  • First known sample

    2007
  • Discovery

    2014
  • Number of targets

    3000-10000
  • Current status

    Active
  • Type

    Complex cyberattack platform , Trojan
  • Targeted platforms

    Windows , Windows Mobile
  • TOP targeted countries

    CIS , Germany , Great Britain , Iran , Malaysia , Netherlands , Russia , Syria , Turkey , Ukraine
  • The way of propagation

    Social engineering , Watering hole attacks
  • Purpose/Functions

    Cyberespionage , Data theft
  • Special features
    The first advanced Frenchspeaking cyberespionage campaign
  • Targets

    Activists , Government entities , Humanitarian aid organizations , Journalists , Mass media and TV , Military contractors , Private companies
  • Artefacts/Attribution
    Animal Farm is a Frenchspeaking cyberespionage campaign (French is an official language in 29 countries).
  • Description

    An advanced threat actor that developed and deployed its own set of malware as early as 2007. Their toolkit includes cyber-espionage platforms, DDoS malware, and Trojans; they targeted governments, media companies, military contractors, and humanitarian organizations around the world. However, traces of Animal Farm disappeared after its discovery went public in 2015.

    Additional information