Higaisa is a cyber espionage group, first publicly disclosed in early 2019, though its activities are assessed to have begun as early as 2009. The group is believed with high confidence to be of South Korean origin, primarily motivated by intelligence gathering related to North Korean interests. Higaisa notably distinguishes itself by combining commodity tools such as Gh0st RAT with custom obfuscation techniques and living-off-the-land binaries, and it has developed mobile malware capabilities. The group is tracked by MITRE ATT&CK under the identifier G0126.

Aliases del actor

APT HIGAISA

Actores similares

apt-higaisaactor · 1apt-45actor · 2apt-c-27actor · 2apt-c-01actor · 2apt-c-12actor · 1apt-18actor · 1apt-1877teamactor · 1apt-27actor · 1apt-30actor · 1apt-38actor · 1

Paises afectados