Název

Techniky

Zaměření

Původ

Adwind

Backdoor, Complex cyberattack platform

Cyberespionage, Surveillance

Angler-EK

Attack Method(s): Drive-by downloads
Attack Target(s):Absolutely random

Motive(s):Underground Business

APT1

APT3

APT5

APT10

APT12

APT16

Complex cyberattack platform

Cyberespionage, DDoS, Data theft, Data wiping

APT18

APT19

APT28

Complex cyberattack platform

Cyberespionage, DDoS, Data theft, Data wiping

APT 29

Complex cyberattack platform

Cyberespionage, DDoS, Data theft, Data wiping

APT 30

Complex cyberattack platform

Cyberespionage, DDoS, Data theft, Data wiping

Complex cyberattack platform

Cyberespionage, DDoS, Data theft, Data wiping

Complex cyberattack platform

Cyberespionage, DDoS, Data theft, Data wiping

Black Energy

Complex cyberattack platform

Cyberespionage, DDoS, Data theft, Data wiping

Blue Termite

Backdoor

Cyberespionage, Data theft, Surveillance

Black Vine

Attack Method(s): Zero-day exploits, Watering-hole attacks, custom-developed malware (Hurix, Sakurel, Mivast)
Typical Target(s): Aerospace, Energy, Healthcare

Motive(s): Cyberespionage

Butterfly

Attack Method(s): Zero-day exploits, custom-developed malware (OSX.Pintsized and Backdoor.Jiripbot)
Typical Target(s): Twitter, Facebook, Apple, and Microsoft compromised in early 2013, with expansion into pharmaceutical, technology, law practices, oil, and precious metal-mining organizations

Motive(s): Cyber espionage, Underground Business
- a government agency bent on economic espionage;
- an organization of hackers-for-hire; or
- an organization with a single customer.

Carbanek

Backdoor

Stealing money, Surveillance

Cloud Atlas

Trojan

Cyberespionage, Data theft,

CosmicDuke

Backdoor

Data theft

CozyDuke

Backdoor, Dropper

Cyberespionage

Crouching Yeti

Backdoor, Remote administration tool

Data theft

Danti

Backdoor

Cyberespionage, Surveillance

Dark Hotel

Backdoor

Cyberespionage, Surveillance

Desert Falcons

Trojan, Backdoor

Cyberespionage, Data theft, Surveillance

Palestine, Egypt and Turkey

Dragonfly

Attack Method(s): Spam email, Watering hole attacks, and two main custom malware tools (Trojan.Karagany and Backdoor.Oldrea)
Typical Target(s): Defense, Aviation in the US & Canada with a move to target European energy firms

Motive(s): Cyber espionage, Spying, Sabotage

Epic Turla

Backdoor

Cyberespionage, Data theft,

EvilPost

Equation

Complex cyberattack platform

Cyberespionage, Data theft, Surveillance

FinSpy

Backdoor, Trojan, Rootkit, Bootkit

Surveillance

GovRAT

Attack Method(s): Targeted distribution (through client-side exploits)
Typical Target(s): Government officials, Military officials, Large Enterprises

Cyberespionage

Hacking team RCS

Backdoor, Trojan, Rootkit

Surveillance

Hellsing

Remote administration tool

Cyberespionage

Kimsuky

Backdoor

Cyberespionage, Data theft, Remote control

MinuDuke

Backdoor

Cyberespionage

Naikon

Trojan, Backdoor, Remote administration tool

Cyberespionage, Data theft, Remote control

NetTraveler

Cyberespionage toolkit

Cyberespionage, Data theft,

Pawn Storm

Attack Method(s): Spearphishing, Phishing Websites, OWA Phishing, iOS apps, Exploits (including Zero-day)
Typical Target(s): NATO, Gov’t, Military, Russian Dissidents, Ukraine

Cyberespionage

Platinum Group

Backdoor, Complex cyberattack platform

Cyberespionage, Surveillance, Remote control

Poseidon

Complex cyberattack platform, Trojan, Rootkit

Cyberespionage, Facilitating other types of attacks, Remote control

Regin

Complex cyberattack platform, Trojan, Rootkit

Cyberespionage, Data theft, Surveillance

Sofacy

SPIVY

SVCMONDR

Complex cyberattack platform

Cyberespionage, Data theft, Surveillance

Turla

Various cybercriminal group

Wild Neutron

Trojan, Cyberespionage toolkit, Backdoor

Cyberespionage, Data theft,

Winnti

Trojan

Data theft,

Waterbug

Attack Method(s): Zero-day exploits, targeted emails, stolen certificates, and a sophisticated watering-hole distribution network known as Venom
Typical Target(s): Government institutions, Embassies, and Education / Research facilities

Cyberespionage, Spying, Intelligence Gathering