Cyber Caliphate ArmyThreat actor
- CyberCaliphate
- islamic state hacking division
- united cyber caliphate
Last reported 4 months ago, by Sekoia.io1 report
ATT&CK techniques
2 techniques · each with the sentence it comes from- T1056.001Keylogging
“The toolkit was unchanged: X-Agent for keylogging and screenshotting, X-Tunnel for exfiltration, Mimikatz for credential theft.”
- T1059.009Cloud API
“On the highest-priority targets, APT28 escalates to BeardShell, a custom C++ backdoor that uses the icedrive cloud API for C2.”
Reports per month
last 12 monthsOctober so far (hatched). Counted by report, not by story.
What the reports say
1 report, newest first · the exact sentence from each-
APT28: An Evolution of Tradecraft from X-Agent to LLM Malware“TV5Monde in April 2015: a disruptive operation run under the fake “CyberCaliphate” impersonating ISIS cyber offensive capacities, attributed to APT28.”
Thanks — we review every report.