TEMP.Veles
threat actor01
also known as
Other names and identifiers for this entity.
ATT&CK
TEMP.Veles · XENOTIME
MISP
ATK91 · TEMP.Veles · Xenotime
TEMP.Veles is a Russia-based threat group that has targeted critical infrastructure. The group has been observed utilizing TRITON, a malware framework designed to manipulate industrial safety systems.
02
resolved ATT&CK groups
Threat groups associated with this.
03
techniques used (2)
ATT&CK techniques this enables or maps to.
04
campaigns (2)
Campaigns that use this.
05
software used (3)
Malware and tools associated with this.
06
references
External citations — patches, advisories, analysis.
- https://dragos.com/resource/trisis-analyzing-safety-system-targeting-malware/
- https://www.fireeye.com/blog/threat-research/2017/12/attackers-deploy-new-ics-attack-framework-triton.html
- https://attack.mitre.org/groups/G0088/
- https://cyberthreat.thalesgroup.com/attackers/ATK91
- https://www.dragos.com/threat/xenotime/