WhiteBear
-
First known sample
2016 -
Discovery
2016 -
Number of targets
Unknown -
Current status
Active -
Type
Cyberespionage toolkit -
Targeted platforms
Windows -
TOP targeted countries
Great Britain , South Korea , USA , Uzbekistan -
Connected attacks
WHITEBEAR
More about the WhiteBear campaign, its targets, techniques and tools involved
-
The way of propagation
Social engineering -
Purpose/Functions
Cyberespionage -
Special features
Please find more information here.
-
Targets
Defense industrial base , Diplomatic organizations/embassies -
Description
A second stage of the “Skipper Turla” operation active from February to September 2016. This operation—conducted by the threat actor Turla—targets embassies and consular operations around the world using compromised websites and hijacked satellite connections for command and control (C2) infrastructure. The exact method of distribution is unknown, but it’s likely the targets are spear-phished with malicious PDF files.