{
  "name": "Russian Military Cyber Actors Target US and Global Critical Infrastructure",
  "slug": "russian-military-cyber-actors-target-us-and-global-critical-infrastructure",
  "description": "The Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), and National Security Agency (NSA) assess that cyber actors affiliated with the Russian General Staff Main Intelligence Directorate (GRU) 161st Specialist Training Center (Unit 29155) are responsible for computer network operations against global targets for the purposes of espionage, sabotage, and reputational harm since at least 2020. GRU Unit 29155 cyber actors began deploying the destructive WhisperGate malware against multiple Ukrainian victim organizations as early as January 13, 2022. These cyber actors are separate from other known and more established GRU-affiliated cyber groups, such as Unit 26165 and Unit 74455.",
  "published": "2024-09-09T06:02:36+00:00",
  "created_at": "2024-09-09T06:02:36+00:00",
  "modified_at": "2024-09-09T06:30:46+00:00",
  "created_at_opencti": "2024-09-09T06:02:36+00:00",
  "author": "",
  "confidence": null,
  "report_types": [],
  "labels": [],
  "tags": [
    "2024-09-09",
    "cadet blizzard",
    "ember bear",
    "frozenvista",
    "gru unit 29155",
    "uac-0056",
    "unc2589",
    "whispergate"
  ],
  "related_entities": {
    "observables": [
      {
        "id": "",
        "name": "81.17.24.130"
      },
      {
        "id": "",
        "name": "79.124.8.66"
      },
      {
        "id": "",
        "name": "62.173.140.223"
      },
      {
        "id": "",
        "name": "5.226.139.66"
      },
      {
        "id": "",
        "name": "46.101.242.222"
      },
      {
        "id": "",
        "name": "45.141.87.11"
      },
      {
        "id": "",
        "name": "185.245.85.251"
      },
      {
        "id": "",
        "name": "185.245.84.227"
      },
      {
        "id": "",
        "name": "179.43.189.218"
      },
      {
        "id": "",
        "name": "179.43.187.47"
      },
      {
        "id": "",
        "name": "179.43.176.60"
      },
      {
        "id": "",
        "name": "179.43.175.38"
      },
      {
        "id": "",
        "name": "179.43.175.108"
      },
      {
        "id": "",
        "name": "179.43.162.55"
      },
      {
        "id": "",
        "name": "179.43.142.42"
      },
      {
        "id": "",
        "name": "179.43.133.202"
      },
      {
        "id": "",
        "name": "112.132.218.45"
      },
      {
        "id": "",
        "name": "90.131.156.107"
      },
      {
        "id": "",
        "name": "194.26.29.98"
      },
      {
        "id": "",
        "name": "194.26.29.95"
      },
      {
        "id": "",
        "name": "194.26.29.84"
      },
      {
        "id": "",
        "name": "194.26.29.251"
      },
      {
        "id": "",
        "name": "112.51.253.153"
      },
      {
        "id": "",
        "name": "111.111.111.111"
      },
      {
        "id": "",
        "name": "154.21.20.82"
      },
      {
        "id": "",
        "name": "https://3proxy.ru"
      },
      {
        "id": "",
        "name": "http://DJVU.SH"
      },
      {
        "id": "",
        "name": "hitccruvbrumn76c1b.bxss.me"
      },
      {
        "id": "",
        "name": "dns.test658324901domain.me"
      },
      {
        "id": "",
        "name": "smm2021.net"
      },
      {
        "id": "",
        "name": "interlinks.top"
      },
      {
        "id": "",
        "name": "3proxy.ru"
      },
      {
        "id": "",
        "name": "3237.site"
      },
      {
        "id": "",
        "name": "009247.3183-377.3183.1bf6c.19446.2@bxss.me"
      },
      {
        "id": "",
        "name": "fd4a5398e55beacb2315687a75af5aa15b776b5d36b9800a1792ede3955616c2"
      },
      {
        "id": "",
        "name": "dcbbae5a1c61dbbbb7dcd6dc5dd1eb1169f5329958d38b58c3fd9384081c9b78"
      },
      {
        "id": "",
        "name": "db5a204a34969f60fe4a653f51d64eee024dbf018edea334e8b3df780eda846f"
      },
      {
        "id": "",
        "name": "b9e64b58d7746cb1d3bed20405ef34d097af08c809d8dad10b9296b0bebb2b0b"
      },
      {
        "id": "",
        "name": "aa79afbf82b06cda268664b7c83900d8f7a33e0f0071facba0b3d8f7a68ce56a"
      },
      {
        "id": "",
        "name": "9ef7dbd3da51332a78eff19146d21c82957821e464e8133e9594a07d716d892d"
      },
      {
        "id": "",
        "name": "923eb77b3c9e11d6c56052318c119c1a22d11ab71675e6b95d05eeb73d1accd6"
      },
      {
        "id": "",
        "name": "35feefe6bd2b982cb1a5d4c1d094e8665c51752d0a6f7e3cae546d770c280f3a"
      },
      {
        "id": "",
        "name": "489ab4819830d231c3fc3572c5386cad9d18773a8121373ea8174de981cc9166"
      },
      {
        "id": "",
        "name": "29ae7b30ed8394c509c561f6117ea671ec412da50d435099756bbb257fafb10b"
      },
      {
        "id": "",
        "name": "163932f1d39d2ae140bcf89aee6d514f65902ce8b4d46c7061c1cc94eb2a25b2"
      },
      {
        "id": "",
        "name": "0dd61a16c625c49ffefaf4ce24cabf9a074028a06640d9bbb804f735ff56dfa3"
      },
      {
        "id": "",
        "name": "1AVNM68gj6PGPFcJuftKATa4WLnzg8fpfv"
      },
      {
        "id": "",
        "name": "5e0f28bd2d49b73e96a87f5c20283ebe030f4bb39b3107d4d68015dce862991d"
      },
      {
        "id": "",
        "name": "a196c6b8ffcb97ffb276d04f354696e2391311db3841ae16c8c9f56f36a38e92"
      },
      {
        "id": "",
        "name": "34ca75a8c190f20b8a7596afeb255f2228cb2467bd210b2637965b61ac7ea907"
      }
    ],
    "malware": [
      {
        "id": "95a2c7dd-5087-4013-8793-414994417151",
        "name": "WhisperGate",
        "slug": "whispergate"
      }
    ],
    "attack_patterns": [
      {
        "id": "9d966bc9-26cc-42dc-a9a7-fce61a440dae",
        "name": "T1596"
      },
      {
        "id": "269fca28-cdea-40b4-ae42-8246ad31a84a",
        "name": "T1125"
      },
      {
        "id": "7616ff60-a18f-4663-9824-b889aa01c8ce",
        "name": "T1588"
      },
      {
        "id": "c9de6d3f-08cf-448d-8b9f-9aeff59fc48f",
        "name": "T1550"
      },
      {
        "id": "444de5e0-bd7f-4700-b700-26320057dd80",
        "name": "T1110"
      },
      {
        "id": "1e043fe4-2413-4b8e-887c-0fe45d095a24",
        "name": "T1583"
      },
      {
        "id": "a2ba5594-6293-4868-928c-ab4b31927a02",
        "name": "T1572"
      },
      {
        "id": "232fbdfa-94c6-443d-b575-373e75b4f4c2",
        "name": "T1567"
      },
      {
        "id": "e73b317e-ea92-49b4-a45d-051f7279aced",
        "name": "T1213"
      },
      {
        "id": "3245033a-53c4-454c-873a-fb653af0bf8a",
        "name": "T1552"
      },
      {
        "id": "5bab4974-1fc2-4144-b093-28ebcb8767dc",
        "name": "T1114"
      },
      {
        "id": "88fa397b-4cc9-42c0-b52d-4108f9630529",
        "name": "T1095"
      },
      {
        "id": "eb118bf2-fdf2-4b49-a470-0acabf7608ad",
        "name": "T1505"
      },
      {
        "id": "5dee2969-7083-430e-9083-73bab54c3a18",
        "name": "T1590"
      },
      {
        "id": "cbd87c8c-3bed-461a-acef-56ffc8b87571",
        "name": "T1105"
      },
      {
        "id": "dc342445-1b78-48b4-aa06-89ed2ad7c28e",
        "name": "T1071"
      },
      {
        "id": "d570881a-1f73-41ca-ad6c-fc29256c76f9",
        "name": "T1595"
      },
      {
        "id": "53c193a7-f726-4bd2-ae88-4019e2604adf",
        "name": "T1046"
      },
      {
        "id": "31d29704-da1c-47ea-b93f-76d368813bdf",
        "name": "T1560"
      },
      {
        "id": "c1e3fabe-9e8b-4e8f-a1f8-bf23e234e770",
        "name": "T1485"
      },
      {
        "id": "6c8f8a40-2746-4a37-86bd-81e82afa6e62",
        "name": "T1190"
      },
      {
        "id": "ca53b2fa-42a8-45ec-9682-0cf54bf280f3",
        "name": "T1090"
      },
      {
        "id": "9f11a241-9abc-4c57-95dd-33955ab08826",
        "name": "T1078"
      },
      {
        "id": "74d6e294-54d1-4a21-9dfc-df5870f8ec8e",
        "name": "T1003"
      },
      {
        "id": "9b6064e6-a05b-4e95-baf5-34d180bc9221",
        "name": "T1059"
      }
    ],
    "vulnerabilities": [
      {
        "id": "",
        "name": "CVE-2022-27666"
      },
      {
        "id": "",
        "name": "CVE-2022-26138"
      },
      {
        "id": "",
        "name": "CVE-2021-33045"
      },
      {
        "id": "",
        "name": "CVE-2021-33044"
      },
      {
        "id": "",
        "name": "CVE-2022-3236"
      },
      {
        "id": "",
        "name": "CVE-2021-4034"
      },
      {
        "id": "",
        "name": "CVE-2021-26084"
      },
      {
        "id": "",
        "name": "CVE-2021-3156"
      },
      {
        "id": "",
        "name": "CVE-2020-1472"
      },
      {
        "id": "",
        "name": "CVE-2022-26134"
      }
    ]
  },
  "external_refs": [
    "https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-249a",
    "https://otx.alienvault.com/pulse/66deab9db2c98c27aa4b5576"
  ]
}