Pulse Detail — Threat Intelligence

PULSE NAME

NOBELIUM Uses Poland's Ambassador’s Visit to the U.S. to Target EU Governments Assisting Ukraine

WHITE Nobelium AlienVault 2023-03-18 Modified: 2023-04-17

IOCs

MEDIUM VOLUME

BlackBerry researchers have observed a new campaign by the Russian state-sponsored threat group, known as APT29, targeting European Union countries and their diplomatic systems, including that of Poland's ambassador to the United States.

MITRE ATT&CK & Malware Families

ATT&CK TECHNIQUES

T1106 T1189 T1199 T1027 T1102 T1204 T1547 T1566 T1584

Indicators of Compromise (3 / 22 total)

All URL FileHash-MD5 FileHash-SHA1 FileHash-SHA256 YARA

TYPE	INDICATOR	DESCRIPTION	CREATED
FileHash-SHA1	2a0478a22d27f7af98786e873b6c85c4ae2e3b2e	SHA1 of 21a0b617431850a9ea2698515c277cbd95de4e59c493d0d8f194f3808eb16354	2023-03-18
FileHash-SHA1	3fd43de3c9f7609c52da71c1fc4c01ce0b5ac74c	SHA1 of 4d92a4cecb62d237647a20d2cdfd944d5a29c1a14b274d729e9c8ccca1f0b68b	2023-03-18
FileHash-SHA1	8eb64670c10505322d45f6114bc9f7de0826e3a1	SHA1 of e957326b2167fa7ccd508cbf531779a28bfce75eb2635ab81826a522979aeb98	2023-03-18

References (1)

↗ https://blogs.blackberry.com/en/2023/03/nobelium-targets-eu-governments-assisting-ukraine