C0026 C0026
active2022-08-01 – 2022-09-01
also known asC0026
C0026 was a campaign identified in September 2022 that included the selective distribution of KOPILUWAK and QUIETCANARY malware to previous ANDROMEDA malware victims in Ukraine through re-registered ANDROMEDA C2 domains. Several tools and tactics used during C0026 were consistent with historic Turla operations.
01
techniques used (6)
ATT&CK techniques this enables or maps to.
02
software used (6)
Malware and tools associated with this.
03
source
Where this definition is published.