SYMBOLCOMMON_NAMEaka. SYNONYMS

TaskMasters  (Back to overview)

aka: BlueTraveller

TaskMasters is a state-sponsored Chinese APT that has been active since at least 2010, primarily targeting industrial, energy, and government sectors in Russia and the CIS. The group has been linked to the Webdav-O Trojan, which employs techniques to bypass network defenses by connecting to legitimate services. Investigations suggest that TaskMasters may have been involved in attacks against Russian federal executive authorities in 2020, potentially alongside another Chinese group, TA428. Additionally, the group has been associated with the BackDoor.RemShell.24 malware, indicating a diverse toolkit in their operations.


Associated Families

There are currently no families associated with this actor.


References
2021-08-03Group-IBAnastasia Tikhonova
The Art of Cyberwarfare: Chinese APTs attack Russia
Albaniiutas TaskMasters
2020-12-09Avast DecodedIgor Morgenstern, Luigino Camastra
APT Group Targeting Governmental Agencies in East Asia
LaZagne Albaniiutas HyperBro MimiKatz PolPo Tmanger TaskMasters

Credits: MISP Project