|
gptkbp:instanceOf
|
cyber threat group
|
|
gptkbp:activeYearsStart
|
at least 2009
|
|
gptkbp:alsoKnownAs
|
gptkb:Sandworm
gptkb:Voodoo_Bear
|
|
gptkbp:associatedWith
|
gptkb:GRU
gptkb:Russian_military_intelligence
|
|
gptkbp:attributedTo
|
gptkb:Parliament_of_the_United_Kingdom
gptkb:US_government
Cybersecurity researchers
|
|
gptkbp:category
|
Advanced Persistent Threat
state-sponsored group
|
|
gptkbp:connectsTo
|
gptkb:APT28
gptkb:Fancy_Bear
gptkb:Unit_74455
|
|
gptkbp:countryOfOrigin
|
gptkb:Russia
|
|
https://www.w3.org/2000/01/rdf-schema#label
|
TA-94
|
|
gptkbp:industry
|
gptkb:energy
gptkb:government
gptkb:media
gptkb:transportation
finance
critical infrastructure
|
|
gptkbp:motive
|
espionage
sabotage
information operations
disruption
|
|
gptkbp:notableBattle
|
gptkb:2015_Ukraine_power_grid_attack
gptkb:2016_Ukraine_power_grid_attack
gptkb:BlackEnergy_malware
gptkb:Industroyer_malware
gptkb:NotPetya_malware
|
|
gptkbp:notableOperation
|
gptkb:2015-2016_Ukraine_power_grid_attacks
gptkb:2017_NotPetya_outbreak
gptkb:2018_Winter_Olympics_cyberattack
gptkb:Operation_BlackEnergy
gptkb:Operation_Olympic_Destroyer
|
|
gptkbp:notableTool
|
gptkb:Exaramel
gptkb:Olympic_Destroyer
gptkb:TeleBots
gptkb:VPNFilter
|
|
gptkbp:target
|
gptkb:Europe
gptkb:Ukraine
gptkb:United_States
|
|
gptkbp:usesMalware
|
gptkb:BlackEnergy
gptkb:GreyEnergy
gptkb:Industroyer
gptkb:KillDisk
gptkb:NotPetya
|
|
gptkbp:bfsParent
|
gptkb:Los_Alamos_National_Laboratory
|
|
gptkbp:bfsLayer
|
4
|