PhantomCore
· Published 23/01/2026 12:02 · Modified 23/01/2026 12:02
· Source: AlienVault
Essential information
- Confidence
- 100/100
- Published
- 23/01/2026 12:02
- Modified
- 23/01/2026 12:02
- Updated at
- 23/01/2026 12:02
- Revoked
- No
- Author / Source
- AlienVault
- Resource level
- —
- Primary motivation
- —
- Related entities
- 1 reports, 10 attack patterns (mitre), 2 malware, 9 sectors, 2 countries, 18 indicators
Description
No description.
Marking (TLP)
TLP:CLEAR
Related entities
Attack patterns, malware, vulnerabilities, indicators and other entities linked to this intrusion set.
Reports (1)
-
7 MITREs 2 Malwares 7 Observables 1 APT
Attack patterns (MITRE) (10)
Malware (2)
-
PhantomCore.PollDL usesFamily
-
PhantomCore usesFamily
Sectors (9)
-
Finance targets
-
Government targets
-
Aerospace targets
-
Chemical targets
-
Retail targets
-
Manufacturing targets
-
Energy targets
-
Technology targets
-
Construction targets
Countries (2)
-
Belarus targets
-
Russian Federation targets
Indicators (18)
-
act-automation.ruindicates -
ink-master.ruindicates -
skbkp.tarusa.ruindicates -
217.60.5.249indicates -
nppntt.ruindicates -
mistralkorea.ruindicates -
npocable-s.ruindicates -
217.60.5.116indicates -
satnet-spb.ruindicates -
217.60.60.18indicates -
spareline.ruindicates -
217.60.1.46indicates