Threat actor
threat_actor:shadow_brokers
Also: Shadow Brokerss, the Shadow Brokers group
Mysterious group that claimed to have obtained and released or auctioned Equation Group cyber-weapons.
Mysterious group that claimed to have obtained and released or auctioned Equation Group cyber-weapons.
“The tweet that Jake read was posted by someone with the name Shadow Brokerss with two s’s at the end.”
“Shadow Brokers have stolen some cyber-weapons from the NSA”
A mysterious group that leaked NSA hacking tools, including EternalBlue, onto the internet.
“this very mysterious group called the Shadow Brokers.”
“started periodically leaking NSA hacking tools onto the internet.”
Group described as leaking NSA tools, including EternalBlue, onto the internet.
“the Shadow Brokers group leaked onto the internet”
Unidentified group that released EternalBlue and other alleged NSA tools and exploits.
“the Shadow Brokers gave the world EternalBlue”
Group described as claiming to possess NSA exploits and prompting NSA-related reporting to Microsoft.
“when the Shadow Brokers claimed they had NSA exploits”
Name used by the group or actor said to have obtained and leaked the NSA exploit.
“someone calling themselves the Shadow Brokers”
“the Shadow Brokers leak”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | MENTIONS | Jake Williams | Explicit | 53 |
| outgoing | ASSOCIATED_WITH | Russia | Uncertain | 53 |
| outgoing | ASSOCIATED_WITH | Russia | Uncertain | 158 |
| incoming | ATTRIBUTED_TO | Shadow Brokers leaks | Explicit | 53 |
| incoming | ASSOCIATED_WITH | EternalBlue | Explicit | 57 |
Shadow Brokers leaks ATTRIBUTED_TO Shadow Brokers
The leaks are described as hacking-tool dumps released by the group calling itself Shadow Brokers.
Explicit Confidence 98% · Jack Rhysider EP 53 Details
“the Shadow Brokers had leaked NSA hacking tools”
Shadow Brokers MENTIONS Jake Williams
The Shadow Brokers publicly identified Jake as a former Equation Group member; Jake says they were not guessing and knew his identity.
Explicit Confidence 98% · Jack Rhysider EP 53 Details
“you having a big mouth for former Equation Group member”
“they 100% were not guessing at who I was”
Shadow Brokers ASSOCIATED_WITH Russia
Jack says most signs point to Russia being behind the Shadow Brokers, but explicitly notes that this is not known for certain.
Uncertain Confidence 86% · Jack Rhysider EP 53 Details
“most signs do point to Russia being behind the Shadow Brokers, but we don’t know for certain”
EternalBlue ASSOCIATED_WITH Shadow Brokers
The Shadow Brokers group leaked the EternalBlue exploit onto the internet.
Explicit Confidence 99% · John Lambert EP 57 Details
“This is one of these NSA tools that the Shadow Brokers group leaked onto the internet”
Shadow Brokers ASSOCIATED_WITH Russia
The Shadow Brokers are said not to have been attributed at the time, but were widely believed to be Russian intelligence.
Uncertain Confidence 95% · Malwaretech EP 158 Details
“the Shadow Brokers isn’t — they haven’t been attributed yet, but it’s widely believed to be Russian intelligence”