SYMBOLCOMMON_NAMEaka. SYNONYMS

IndigoZebra  (Back to overview)


IndigoZebra is a Chinese state-sponsored actor mentioned for the first time by Kaspersky in its APT Trends report Q2 2017, targeting, at the time of its discovery, former Soviet Republics with multiple malware strains including Meterpreter, Poison Ivy, xDown, and a previously unknown backdoor called “xCaon.”


Associated Families

There are currently no families associated with this actor.


References
2021-07-02 ⋅ Rewterz Information Security ⋅ Rewterz Information Security
Rewterz Threat Intel – IndigoZebra APT Group Targeting Central Asia – Active IOCs
IndigoZebra
2021-07-01 ⋅ Check Point ⋅ Check Point Research
IndigoZebra APT continues to attack Central Asia with evolving tools
BoxCaon xCaon IndigoZebra
2017-08-08 ⋅ Kaspersky Labs ⋅ GReAT
APT Trends report Q2 2017
IndigoZebra

Credits: MISP Project