More about the DarkUniverse group, its tactics, techniques, procedures and tools
An APT group active for at least eight years, from 2009 until 2017. It used spear phishing to drop its malware—a full cyber-espionage framework made from scratch and capable of collecting massive amounts of information about the user and the infected system. It was found targeting medical institutions, atomic energy bodies, military organizations and telecommunications companies in Western Asia and Northeastern Africa. DarkUniverse is connected with activities by the APT actor ItaDuke