Operation TunnelSnake is an advanced persistent threat campaign that first emerged in October 2019, primarily targeting regional diplomatic entities in Asia and Africa. The actor behind this campaign is assessed with moderate confidence to be Chinese-speaking, focusing its efforts on cyber espionage. What sets Operation TunnelSnake apart is its reliance on a unique and highly evasive kernel-level rootkit named Moriya, designed to grant long-term, covert access and control over compromised networks without relying on traditional command and control infrastructure.

Actores similares

Operation Wocaoapt · 1influence-operationsactor · 1Operation Ghostwriterapt · 0Operation C-Majorapt · 0Operation Silent Skimmerapt · 0Operation Cobalt Whisperapt · 0Operation RusticWebapt · 0Operation LiberalFaceapt · 0Operation Olympic Gamesapt · 0Operation SalmonSlalomapt · 0