G0035 Dragonfly
EnterpriseICSalso known asDragonfly · TEMP.Isotope · DYMALLOY · Berserk Bear · TG-4192 · Crouching Yeti · IRON LIBERTY · Energetic Bear · Ghost Blizzard · BROMINE
Dragonfly is a cyber espionage group that has been attributed to Russia's Federal Security Service (FSB) Center 16. Active since at least 2010, Dragonfly has targeted defense and aviation companies, government entities, companies related to industrial control systems, and critical infrastructure sectors worldwide through supply chain, spearphishing, and drive-by compromise attacks.
01
canonical actor
The group this is attributed to.
02
techniques used (58)
ATT&CK techniques this enables or maps to.
showing 20 of 58
03
software used (10)
Malware and tools associated with this.
04
Detected by (Sigma) (1)
Sigma detection rules related to this.
05
source
Where this definition is published.