SYMBOLCOMMON_NAMEaka. SYNONYMS

Redfly  (Back to overview)


Redfly hacked a national electricity grid organization in Asia and maintained persistent access to the network for about six months. Researchers discovered evidence for this attack between 28 February and 3 August 2023 after noticing suspicious malware activity within the organization’s network.


Associated Families

There are currently no families associated with this actor.


References
2023-10-13Rewterz Information SecurityRewterz Information Security
Rewterz Threat Alert – Power Supplier’s Network Infiltrated for 6 Months by “Redfly” Hackers – Active IOCs
Redfly
2023-09-12SymantecThreat Hunter Team
Redfly: Espionage Actors Continue to Target Critical Infrastructure
ShadowPad Redfly

Credits: MISP Project