WhiteBear

  • The way of propagation

    Social engineering
  • Purpose/Functions

    Cyberespionage
  • Special features
    Please find more information here.
  • Targets

    Defense industrial base , Diplomatic organizations/embassies
  • Description

    A second stage of the “Skipper Turla” operation active from February to September 2016. This operation—conducted by the threat actor Turla—targets embassies and consular operations around the world using compromised websites and hijacked satellite connections for command and control (C2) infrastructure. The exact method of distribution is unknown, but it’s likely the targets are spear-phished with malicious PDF files.

    Additional information