Profile
Also known as: ATK116, Blue Odin, Clean Ursa, Cloud Atlas, G0100, Inception, OXYGEN
This threat actor uses spear-phishing techniques to target private-sector energy, defense, aerospace, research, and media organizations and embassies in Africa, Europe, and the Middle East, for the purpose of espionage.
ATT&CK techniques · 22
Resource Development
Initial Access
Execution
Persistence
Credential Access
Discovery
Collection
Incidents attributed
- No incident in the register is attributed to this actor.
In the news
- No Asia-Pacific article names this actor yet.
Targets
Elsewhere: Afghanistan, Armenia, Azerbaijan, Belgium, Belarus, Czechia, United Kingdom, Greece, Iran, Italy, Kenya, Kazakhstan, Russia, Suriname, Turkmenistan, Ukraine, United States, South Africa
Sectors: Government, Private sector
Relevance to the EU
EU relevance: High
Targets EU member states (Belgium, Czechia, Greece, Italy) as well as 3 Asia-Pacific countries
28 EU cooperation projects in the Asia-Pacific countries this actor targets: