🇨🇳

ShroudedSnooper

APT Group Information theft and espionage ETDA ✓

Also Known As

No alias recorded

Target Countries

No target country recorded

Sectors Targeted

Telecommunications

Details

Origin 🇨🇳 CN

Last Updated 08 Nov 2023

MITRE ATT&CK 5

T1059 T1071.001 T1105 T1218 T1566.001

Related Zero-Days

No zero-day CVE linked to this actor

Known Names 1 entries

ShroudedSnooper Talos

Observed Target Countries 1

Based on ETDA data — countries highlighted in red

Middle East

Description

(Talos) This specific cluster of implants involving HTTPSnoop and PipeSnoop and associated tactics, techniques, and procedures (TTPs) do not match a known group that Talos tracks. We are therefore attributing this activity to a distinct intrusion set we’re calling “ShroudedSnooper.”

Tools Used 2

HTTPSnoop PipeSnoop

Reports & References 1

https://blog.talosintelligence.com/introducing-shrouded-snooper/

ETDA Profile

ShroudedSnooper

Origin

[Unknown]

First Seen 2023

Motivation

Information theft and espionage

View on ETDA APT Groups ↗