Threat actor
threat_actor:state_sponsored_group
Also: state-sponsored groups
A suspected category of threat actor described as operating with nation-state sponsorship; no specific group is named.
A suspected category of threat actor described as operating with nation-state sponsorship; no specific group is named.
“I’ve been told, it’s state-sponsored. It’s in the east, I guess.”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | ASSOCIATED_WITH | Advanced Persistent Threat | Uncertain | 11 |
| incoming | ATTRIBUTED_TO | malware | Attributed | 11 |
Advanced Persistent Threat ASSOCIATED_WITH state-sponsored group
Andrew says he was told that the APT group was state-sponsored, while expressing uncertainty about the attribution and location.
Uncertain Confidence 88% · Andrew EP 11 Details
“So I’ve been told, it’s state-sponsored. It’s in the east, I guess.”
malware ATTRIBUTED_TO state-sponsored group
The malware found in the network matched malware described in a published report that linked it to the APT group.
Attributed Confidence 93% · Jack Rhysider EP 11 Details
“the malware found in the network matched exactly the same malware that someone had published in a report which linked it back to that APT group”