Two Birds, One STONE PANDA
Introduction In April 2017, a previously unknown group calling itself IntrusionTruth began releasing blog posts detailing individuals believed to be associated with…
Research & Threat Intel
Meet CrowdStrike’s Adversary of the Month for August: GOBLIN PANDA
CrowdStrike® first observed GOBLIN PANDA activity in September 2013 when indicators of its activity were discovered on the network of a technology…
Arrests Put New Focus on CARBON SPIDER Adversary Group
In an indictment unsealed by the U.S. Department of Justice (DoJ) on Aug. 1, 2018, three Ukrainian nationals have been charged with…
Meet CrowdStrike’s Adversary of the Month for July: WICKED SPIDER
WICKED SPIDER (PANDA) is a suspected China-based adversary that likely operates as an exploitation group for hire. The use of two cryptonyms…
Meet CrowdStrike’s Adversary of the Month for June: MUSTANG PANDA
The June 2018 adversary spotlight is on MUSTANG PANDA, a China-based adversary that has demonstrated an ability to rapidly assimilate new tools…
Meet CrowdStrike’s Adversary of the Month for May: MYTHIC LEOPARD
The May 2018 adversary spotlight is on MYTHIC LEOPARD, a Pakistan-based adversary with operations likely located in Karachi. This adversary uses social…
Meet CrowdStrike’s Adversary of the Month for April: STARDUST CHOLLIMA
STARDUST CHOLLIMA is a targeted intrusion adversary with a likely nexus to the Democratic People’s Republic of Korea (DPRK). This adversary is…
Why North Korean Cyberwarfare is Likely to Intensify
Despite a parade of issues battling for headlines today, the impending negotiations between the United States and the Democratic People's Republic of…
Software Supply Chain Attacks Gained Traction in 2017 and Are Likely to Continue
One of the important topics covered in the CrowdStrike® 2018 Global Threat Report is the increase in supply chain attacks in 2017.…
Meet CrowdStrike’s Adversary of the Month for February: MUMMY SPIDER
Enter to win a stunning CrowdStrike 2018 Adversary Calendar featuring MUMMY SPIDER and more. In continuance of our monthly blog post to introduce…