French-speaking gang OPERA1ER APT in Africa
Excerpt
French-speaking gang OPERA1ER APT in Africa | Group-IB Blog
In 2019, Group-IB Threat Intelligence team detected a series of targeted attacks on financial organizations in Africa. Later in 2020, our professionals in collaboration with Orange, managed to piece together the seemingly disparate attacks into a single timeline and successfully attribute them to the threat actor codenamed OPERA1ER (also known as DESKTOP-GROUP, Common Raven, NXSMS).
Our latest threat research
In 2021, together with Orange CERT-CC, we’ve got an idea to release a comprehensive report (now known as “OPERA1ER. Playing God without permission”) which would thoroughly describe this persistent threat, map out all TTPs and methods this criminal syndicate leverages that remained un…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by Group-IB on blog.group-ib.com.
More from Group-IB28
- Stray Cat, Open Doors: How k0t Wanders Through the Network EdgeGroup-IB · Published 21 Oct
- BlogGroup-IB · Published 15 Dec 2022
- Anatomy of BraZetsu: How Cybercriminals Fuel the Underground EcosystemGroup-IB · Published 31 Aug
- JadeProx: Tracing a China-nexus Operation Through an OPSEC MistakeGroup-IB · Published 23 Jul
On the same topics
- Retrohunting APT37: North Korean APT used VBA self decode technique to inject RokRatMalwarebytes · Published 5 Jan 2021
- Kazuar (Malware Family)Malpedia · Added 18 Oct
- Chinese Nation-State Hackers Target U.S in Operation TradeSecret, Report Claimseweek.com · Published 6 Apr 2017
- Taiwan High-Tech Ecosystem Targeted by Foreign APT Group:Medium · Published 10 Jun 2022
