Mysterious Elephant, also tracked as APT-K-47, is a cyber espionage group whose activity was first documented in early 2022, although it was publicly detailed in 2023. The group is assessed with high confidence to be state-sponsored by India. Its primary motivation is cyber espionage, targeting government entities and foreign affairs organizations, particularly in South Asia, including Pakistan, Bangladesh, and Turkey, and expanding to Afghanistan, Nepal, and Sri Lanka. Mysterious Elephant distinguishes itself through the use of Hajj-related spear-phishing campaigns, leveraging Microsoft Compiled HTML Help (CHM) files, and the deployment of custom malware families such as Asyncshell and ORPCBackdoor, while exhibiting operational similarities with other regional threat actors like SideWinder, Confucius, and Bitter.

Actores similares

whiteelephantactor · 1apt-modifiedelephantactor · 1modifiedelephantactor · 1mysterious-metadoractor · 1Dropping Elephantapt · 0Fishing Elephantapt · 0ModifiedElephantapt · 0