Operation ForumTroll is a state-sponsored cyber espionage campaign that emerged by at least 2022, focusing on intelligence gathering. It is characterized by its highly targeted spear-phishing tactics using personalized lures, such as fake invitations to the 'Primakov Readings' forum or bogus plagiarism reports from eLibrary.ru, to exploit zero-day browser vulnerabilities like CVE-2025-2783 in Google Chrome. While the group's specific national origin remains unknown, its technical sophistication strongly suggests state sponsorship. A distinguishing characteristic is its confirmed association with Memento Labs, the successor to Hacking Team, and the use of their commercial spyware Dante. The group has also been referred to as Mem3nt0 mori or ForumTroll APT.

Aliases del actor

taxoffteam46

Actores similares

taxoffactor · 1Operation Wocaoapt · 1influence-operationsactor · 1Operation Ghostwriterapt · 0Operation C-Majorapt · 0Operation Silent Skimmerapt · 0Operation Cobalt Whisperapt · 0Operation RusticWebapt · 0Team46apt · 0Operation LiberalFaceapt · 0