Kasablanka is a cyber espionage group initially identified and named by Cisco, with its operations assessed to be based in Morocco. The group has been active since at least 2015, consistently focusing on information gathering and intelligence collection rather than direct financial gain. Kasablanka distinguishes itself through its adaptive use of social engineering tactics and custom malware to infiltrate target networks and exfiltrate sensitive data. Although primarily linked to cyber espionage, the group has also evolved to target supply chain vendors to gain indirect access to high-value targets, demonstrating a strategic shift in their operational model.

Aliases del actor

APT KASABLANKA

Actores similares

apt-kasablankaactor · 1apt-45actor · 2apt-c-27actor · 2apt-c-01actor · 2apt-c-12actor · 1apt-18actor · 1apt-1877teamactor · 1apt-27actor · 1apt-30actor · 1apt-38actor · 1