IndigoZebra

· ATT&CK GroupG0136

Techniques

Software

Tactics

Aliases

Description

IndigoZebra is a suspected Chinese cyber espionage group that has been targeting Central Asian governments since at least 2014.(Citation: HackerNews IndigoZebra July 2021)(Citation: Checkpoint IndigoZebra July 2021)(Citation: Securelist APT Trends Q2 2017)

Tactic Coverage

resource development (4)command and control (1)execution (1)initial access (1)

Techniques Used (7)

T1105Ingress Tool Transfer

command and control

T1204.002Malicious File

execution

T1566.001Spearphishing Attachment

initial access

T1583.001Domains

resource development

T1583.006Web Services

resource development

Registration Required

Create a free account to access full Threat Actor Techniques

Showing 5 of 7 results

✓ Personal dashboard✓ Track 1 vendor/product✓ 1 keyword alert✓ Weekly digest✓ 1 CSV export/month

Already have an account? Sign in →

Software Used (3)

S0651BoxCaonmalware S0012PoisonIvymalware S0653xCaonmalware

References (5)

https://attack.mitre.org/groups/G0136 https://thehackernews.com/2021/07/indigozebra-apt-hacking-campaign.html https://research.checkpoint.com/2021/indigozebra-apt-continues-to-attack-central-asia-with-evolving-tools/https://securelist.com/apt-trends-report-q2-2017/79332/