KarkadannThreat actor
- piwiks
Karkadann is a threat actor that has been active since at least October 2020, targeting government bodies and news outlets in the Middle East. They have been involved in watering hole attacks, compromising high-profile websites to inject malicious JavaScript code.From MISP Galaxy
Last reported 4 months ago, by Sekoia.io1 report
ATT&CK techniques
1 technique · each with the sentence it comes from- T1684Social Engineering
“This method significantly reduces the risk of detection and failure, as it does not rely on preemptive social engineering.”
Reports per month
last 12 monthsOctober so far (hatched). Counted by report, not by story.
What the reports say
1 report, newest first · the exact sentence from each-
Predators for Hire: Commercial Surveillance Vendors Overview“Others also have Desktop branches, such as Candiru (known as Karkadann), which has been active since at least 2020.”
Indicators in its reports
named in the reports above- gov[.]ukin 1 report
- surveillancewatch[.]ioin 1 report
Copy these 2 indicators · defanged
Thanks — we review every report.