#BLUELIGHT

Malware/Tool

2021-08-17 • North Korean APT InkySquid Infects Victims Using Browser Exploits

BLUELIGHT is a remote access Trojan used by APT37 that was first observed in early 2021.

https://attack.mitre.org/software/S0657/

3

Tagged Reports
2

Unique Authors
471

Active Days

Tagged Reports

2022-11-30

ESET

Who’s swimming in South Korean waters? Meet ScarCruft’s Dolphin

#Scarcruft #Dolphin #T1025 #T1102.002 #T1203 #T1016 #T1106 #T1027 #T1082 #T1119 #T1518.001 #T1074.001 #T1016.001 #T1547.001 #T1567.002 #T1005 #T1059.007 #T1053.005 #T1539 #T1010 #T1113 #T1020 #T1055.002 #T1071.001 #T1059.006 #T1083 #T1189 #T1124 #T1555.003 #T1033 #T1056.001 #T1560.002 #BLUELIGHT #CVE-2020-1380 #InternetExplorer

2021-08-24

Volexity

North Korean BLUELIGHT Special: InkySquid Deploys RokRAT

#InkySquid #BLUELIGHT #RokRAT #DOGCALL

2021-08-17

Volexity

North Korean APT InkySquid Infects Victims Using Browser Exploits

#InkySquid #BLUELIGHT #CobaltStrike #CVE-2020-1380 #CVE-2021-26411 #InternetExplorer

« Back