MurenShark, also known by the alias Actor210426, is a cyber espionage group that first emerged in April 2021. The group is active in the Middle East and primarily focuses on targeting entities within Turkey, though its specific geographic affiliation or origin remains unconfirmed. Its primary motivation is cyber espionage, specifically to obtain critical data, often related to military and defense projects. What distinguishes MurenShark is its high proficiency in counter-analysis and reverse traceability, alongside its tactic of compromising legitimate university websites to establish long-term command and control (C2) servers and file servers, sometimes maintaining control for over a year. The group also employs a unique 'behavior splitting' technique to segment malicious functionalities within its documents, complicating detection and analysis.

Aliases del actor

Actor210426APT MURENSHARK

Actores similares

apt-murensharkactor · 1apt-45actor · 2apt-c-27actor · 2apt-c-01actor · 2apt-c-12actor · 1apt-18actor · 1apt-1877teamactor · 1apt-27actor · 1apt-30actor · 1apt-38actor · 1