LonghornThreat actor
- apt-c-39
- lamberts
- platinum terminal
- the lamberts
Longhorn has been active since at least 2011. It has used a range of back door Trojans in addition to zero-day vulnerabilities to compromise its targets. Longhorn has infiltrated governments and internationally operating organizations, in addition to targets in the financial, telecoms, energy, aerospace, information technology, education, and natural resources sectors.From MISP Galaxy
Last reported 4 years ago, by Group-IB1 report
Suspected originUnited StatesMISP Galaxy
Targets sectorsGovernment, telecom, defence, energy, education, finance, mediaMISP Galaxy
What the reports say
1 report, newest first · the exact sentence from each-
“We find many things that others do not even see”“I can probably single out Longhorn (aka The Lamberts) because it is such a ghost group.”
Indicators in its reports
named in the reports above- 87e4f863efc6d41f…62b18dc08e99in 1 report
- 5fdd710e8f514a30…36caa0e0b591in 1 report
Copy these 2 indicators · defanged
Thanks — we review every report.