coldbraid

Nomadic Octopus

Nomadic Octopus is a Russian-speaking cyber espionage threat group that has primarily targeted Central Asia, including local governments, diplomatic missions, and individuals, since at least 2014. Nomadic Octopus has been observed conducting campaigns involving Android and Windows malware, mainly using the Delphi programming language, and building custom variants.

ATT&CK ID
G0133
Origin
Russia
Techniques
6
Tools
1

Also tracked as DustSquad

Techniques

Initial Access

Phishing

Execution

Command and Scripting InterpreterUser Execution

Stealth

MasqueradingHide Artifacts

Command and Control

Ingress Tool Transfer

Software

Octopus