ClassicBrechasMapaActoresTTP MatrixAnaliticaAlertasCyberNewsArsenalExploitsKillChainOrigenSSLBLRansomLookRansomwhere
DarkHotel
0 incidentes
0 paises
0 sectores
apt KR Ultimo: -
Aliases: APT-C-06, ATK52, DUBNIUM, Dark Hotel, Fallout Team, G0012, Karba, Luder, Nemim, Nemin, Pioneer, SIG25, Shadow Crane, T-APT-02, TUNGSTEN BRIDGE, Tapaoux, Zigzag Hail, apt-c-60
DarkHotel is a long-standing cyber espionage group first documented in 2004, suspected to be of South Korean origin. The group's primary motivation is intelligence gathering, focusing on stealing sensitive data, passwords, and intellectual property from high-profile individuals. Their distinguishing characteristic has been the strategic compromise of hotel Wi-Fi networks to precisely target traveling executives and government officials. Over time, DarkHotel has evolved its tactics, moving beyond hotel-specific attacks to include supply chain compromises and cloud-based espionage operations. The group operates under several aliases including Tapaoux, Dubnium, and APT-C-06, and is recognized for its high operational sophistication and ability to maintain persistent access to targeted networks.