Record · corpus.blog/posts/01a0ca9c-c7aa-7280-833d-2253eedba15d

The CozyDuke APT

Kaspersky Securelist · published 21 April 2015

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at securelist.com Wayback capture

1blogs citing

First cited: 30 Jan 2021
Most recent: 30 Jan 2021
Rank this month: not ranked
Links from this post: 29
Words captured: 2,030

Cited by

Blog

In the post

Date

squiblydoo.blog

theZoo: Win32.OnionDuke.B Read at the source ↗

30 Jan 2021

Links from this post

Link

Host

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2015/04/08061845/monkeys.png

media.kasperskycontenthub.com

http://www.cnn.com/2015/03/10/politics/state-department-hack-worst-ever/

cnn.com

http://www.bbc.com/news/technology-29817644

bbc.com

http://www.wsj.com/articles/three-months-later-state-department-hasnt-rooted-out-hackers-1424391453

wsj.com

http://www.washingtonpost.com/world/national-security/state-department-shuts-down-its-e-mail-system-amid-concerns-about-hacking/2014/11/16/92cf0722-4815-41ca-b602-9bfe8ecdb256_story.html

washingtonpost.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2015/04/08061725/CozyDuke_map.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2015/04/08061738/collectedSystemInfo.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2015/04/08061840/FakeCerts.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2015/04/08061836/CDconfig.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2015/04/08061832/db.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2015/04/08061810/decodedConfig.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2015/04/08061756/victimTask.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2015/04/08061752/victimOneDrive.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2015/04/08061748/victimDecode.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2015/04/08061742/victimErrors.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2015/04/08061828/cachetable.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2015/04/08061824/CacheDLL_ADB_Setup.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2015/04/08061820/cryptedBlob.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2015/04/08061813/DecryptedBlob.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2015/04/08061805/onion.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2015/04/08061800/exports.png

media.kasperskycontenthub.com

The MiniDuke Mystery: PDF 0-day Government Spy Assembler 0x29A Micro Backdoor Read at the source ↗

securelist.com

Miniduke is back: Nemesis Gemina and the Botgen Studio Read at the source ↗

securelist.com

http://blog.crysys.hu/2014/07/miniduke-2-cosmicduke/

blog.crysys.hu

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2015/04/20081948/cosmicduke_whitepaper.pdf

media.kasperskycontenthub.com

http://www.leviathansecurity.com/blog/the-case-of-the-modified-binaries/

leviathansecurity.com

A word on CosmicDuke Read at the source ↗

bartblaze.blogspot.com

https://www.f-secure.com/weblog/archives/00002764.html

f-secure.com

https://www.f-secure.com/weblog/archives/00002780.html

f-secure.com