| SYMBOL | COMMON_NAME | aka. SYNONYMS |
In 2014, researchers at Kaspersky Lab discovered and reported on three zero-days that were being used in cyberattacks in the wild. Two of these zero-day vulnerabilities are associated with an advanced threat actor we call Animal Farm. Over the past few years, Animal Farm has targeted a wide range of global organizations. The group has been active since at least 2009 and there are signs that earlier malware versions were developed as far back as 2007.
| 2019 ⋅ Council on Foreign Relations ⋅ Snowglobe SNOWGLOBE |
| 2017-09-06 ⋅ Palo Alto Networks Unit 42 ⋅ Analysing a 10-Year-Old SNOWBALL Babar |
| 2015-07-08 ⋅ Infosec ⋅ Animal Farm APT and the Shadow of French Intelligence SNOWGLOBE |
| 2015-03-06 ⋅ Kaspersky Labs ⋅ Animals in the APT Farm SNOWGLOBE |
| 2015-03-05 ⋅ ESET Research ⋅ Casper Malware: After Babar and Bunny, Another Espionage Cartoon Casper |
| 2015-02-18 ⋅ Vice Motherboard ⋅ Meet Babar, a New Malware Almost Certainly Created by France SNOWGLOBE |
| 2015-02-18 ⋅ G Data ⋅ Babar: espionage software finally found and put under the microscope Evilbunny SNOWGLOBE |
| 2015-02-18 ⋅ Cyphort ⋅ Shooting Elephants Babar |
| 2015-02-18 ⋅ Cyphort ⋅ Babar: Suspected Nation State Spyware In The Spotlight Babar Evilbunny SNOWGLOBE |
| 2014-12-16 ⋅ Cyphort ⋅ EvilBunny: Malware Instrumented By Lua Evilbunny SNOWGLOBE |
| 2011 ⋅ Spiegel Online ⋅ SNOWGLOBE: From Discovery to Attribution Babar |