NEODYMIUM

threat actor

also known as

Other names and identifiers for this entity.

ATT&CK

NEODYMIUM

MISP

NEODYMIUM

NEODYMIUM is an activity group that is known to use a backdoor malware detected by Microsoft as Wingbird. This backdoor’s characteristics closely match FinFisher, a government-grade commercial surveillance package. Data about Wingbird activity indicate that it is typically used to attack individual computers instead of networks.

resolved ATT&CK groups

Threat groups associated with this.

G0055NEODYMIUM

software used (1)

Malware and tools associated with this.

S0176Wingbird

references

External citations — patches, advisories, analysis.

https://blogs.technet.microsoft.com/mmpc/2016/12/14/twin-zero-day-attacks-promethium-and-neodymium-target-individuals-in-europe/
https://attack.mitre.org/groups/G0055/