G0133 · 7 ATT&CK techniques · 0 correlated reports

Nomadic Octopus

Aliases: DustSquad

Nomadic Octopus is a Russian-speaking cyber espionage threat group that has primarily targeted Central Asia, including local governments, diplomatic missions, and individuals, since at least 2014. Nomadic Octopus has been observed conducting campaigns involving Android and Windows malware, mainly using the Delphi programming language, and building custom variants.

Open interactive actor investigation

ATT&CK techniques

T1059.003
Windows Command ShellT1036
MasqueradingT1566.001
Spearphishing AttachmentT1204.002
Malicious FileT1105
Ingress Tool TransferT1564.003
Hidden WindowT1059.001
PowerShell

Correlated CTI and IR reports

Continue the investigation

Interactive ThreatMapper ThreatMapper documentation CTI Analyst Field Manual Israel Threat Actors CTI Anomaly Detection Atlas ITDR Handbook 1200km Medium research