EvilPost is a sophisticated cyber threat actor primarily engaged in advanced persistent threats (APTs) targeting multiple sectors across various countries. The group's operations are characterized by the use of custom malware and exploitation of critical vulnerabilities. EvilPost is assessed with high confidence to be of Chinese origin, reflecting motivations aligned with intelligence gathering and strategic advantage for state interests. While they have been linked to numerous high-profile attacks, specific details defining their unique operational characteristics or structure evolution are not widely documented under this designation. They are often associated with activities similar to groups like APT29, Cozy Bear, and The Dukes, though these are considered related groups rather than direct aliases or structural evolutions of EvilPost.

Aliases del actor

CVE-2015-2545Japanese Defence Sectorun servidor C2 (Control de Comandos) localizado en Japón

Actores similares

iocontrolactor · 1redcontroleactor · 1cve-2023-41991actor · 1apt-sectora05actor · 1cve-2023-36884actor · 1Bypass User Account Controlactor · 1private-sector-offensiveactor · 1Operation DRBControlapt · 0PhantomControlapt · 0