Pulse Detail — Threat Intelligence

PULSE NAME

NOBELIUM Uses Poland's Ambassador’s Visit to the U.S. to Target EU Governments Assisting Ukraine

WHITE Nobelium AlienVault 2023-03-18 Modified: 2023-04-17

IOCs

MEDIUM VOLUME

BlackBerry researchers have observed a new campaign by the Russian state-sponsored threat group, known as APT29, targeting European Union countries and their diplomatic systems, including that of Poland's ambassador to the United States.

MITRE ATT&CK & Malware Families

ATT&CK TECHNIQUES

T1106 T1189 T1199 T1027 T1102 T1204 T1547 T1566 T1584

Indicators of Compromise (2 / 22 total)

All URL FileHash-MD5 FileHash-SHA1 FileHash-SHA256 YARA

TYPE	INDICATOR	DESCRIPTION	CREATED
URL	https://literaturaelsalvador.com/Schedule.html	—	2023-03-18
URL	https://literaturaelsalvador.com/Instructions.html	—	2023-03-18

References (1)

↗ https://blogs.blackberry.com/en/2023/03/nobelium-targets-eu-governments-assisting-ukraine