TaskMasters

Known Names 1 entries

Observed Target Countries 2

Based on ETDA data — countries highlighted in red

Description

(Positive Technologies}) The main objective of the group is to steal confidential information. The attackers attempt to burrow into corporate information systems for extended periods and obtain access to key servers, executive workstations, and business-critical systems. At one of the attacked companies, the earliest traces of the group's presence on infrastructure dated to 2010. Since the group had obtained full control of some servers and workstations by that time, the initial breach must have occurred much earlier. Most of the attacked companies relate to manufacturing and industry. In total we are aware of compromise of over 30 companies and organizations in various sectors, including: • Manufacturing and industry • Energy • Government • Science and technology • Systems integration • Software development • Geology • Transport and logistics • Real estate • Construction The group attacked companies in a number of countries. A significant number of their targets were located in Russia and the CIS.

Tools Used 17

Operations 1

Reports & References 1