Threat actor · G0012

Darkhotel

DUBNIUMZigzag Hail

UnattributedNo public state or group attribution on record

Darkhotel is a suspected South Korean threat group that has targeted victims primarily in East Asia since at least 2004. The group's name is based on cyber espionage operations conducted via hotel Internet networks against traveling executives and other select guests. Darkhotel has also conducted spearphishing campaigns and infected victims through peer-to-peer and file sharing networks.

MITRE ATT&CK Techniques

T1016 T1027.013 T1036.005 T1056.001 T1057 T1059.003 T1080 T1082 T1083 T1091 T1105 T1124 T1140 T1189 T1203 T1204.002 T1497 T1497.001 T1497.002 T1518.001 T1547.001 T1553.002 T1566.001 T1573.001

Associated Malware

Full MITRE ATT&CK profile

0 recent articles mention this actor

No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.