G0071 Orangeworm
Enterprisealso known asOrangeworm
Orangeworm is a group that has targeted organizations in the healthcare sector in the United States, Europe, and Asia since at least 2015, likely for the purpose of corporate espionage. Reverse engineering of Kwampirs, directly associated with Orangeworm activity, indicates significant functional and development overlaps with Shamoon.
01
canonical actor
The group this is attributed to.
02
techniques used (2)
ATT&CK techniques this enables or maps to.
03
software used (8)
Malware and tools associated with this.
04
source
Where this definition is published.