GALLIUM
BedrohungsakteurCN01
auch bekannt als
Weitere Namen und Kennungen dieser Entität.
MISP
Alloy Taurus · GALLIUM · Granite Typhoon · PHANTOM PANDA · Red Dev 4
GALLIUM, is a threat actor believed to be targeting telecommunication providers over the world, mostly South-East Asia, Europe and Africa. To compromise targeted networks, GALLIUM target unpatched internet-facing services using publicly available exploits and have been known to target vulnerabilities in WildFly/JBoss.
02
verwandte Akteure
Verwandte Einträge.
- Operation Soft Cell· almost-certain
03
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://www.microsoft.com/security/blog/2019/12/12/gallium-targeting-global-telecom/
- https://www.youtube.com/watch?v=fBFm2fiEPTg
- https://troopers.de/troopers22/talks/7cv8pz/
- https://unit42.paloaltonetworks.com/atoms/alloytaurus/
- https://unit42.paloaltonetworks.com/alloy-taurus-targets-se-asian-government/