Mysterious ElephantThreat actor
Mysterious Elephant is an APT group active since 2023 that primarily targets government and foreign affairs entities across South Asia, especially Pakistan, Bangladesh, Sri Lanka, Nepal, and Afghanistan.From MISP Galaxy
Last reported 3 months ago, by SentinelLabs1 report
ATT&CK techniques
1 technique · each with the sentence it comes from- T1036Masquerading
“A suspected China-nexus threat actor also compromised one of these web applications, deploying custom implants masquerading as a portal update.”
Reports per month
last 12 monthsOctober so far (hatched). Counted by report, not by story.
What the reports say
1 report, newest first · the exact sentence from each-
One Target, Two Flags | Rival Espionage Actors Converge On Pakistani Law Enforcement“Its infrastructure, tooling, and TTPs overlap to varying degrees with those of the threat actors tracked by Kaspersky as Mysterious Elephant and by Qihoo 360 as APT-C-08 (a.k.a.”
Indicators in its reports
named in the reports above- 172.111.233[.]36in 1 report
- 172.111.233[.]96in 1 report
- 172.111.233[.]12in 1 report
- 172.111.233[.]105in 1 report
- 172.111.233[.]26in 1 report
- 172.94.9[.]49in 1 report
- 172.94.9[.]43in 1 report
- 172.94.9[.]19in 1 report
- 45.74.6[.]17in 1 report
- 45.125.32[.]218in 1 report
- 142.171.183[.]8in 1 report
- 193.42.25[.]65in 1 report
- 89.31.121[.]220in 1 report
- cms.balochistanpolice.gov[.]pkin 1 report
- 41.216.188[.]140in 1 report
- 000fad96a85dd693…ed47b7f1f066in 1 report
- 08570471f39bb672…99ed48c22686in 1 report
- 23f4766c011d193f…60e2a41ead79in 1 report
- 23f6781919a50b11…e63b71ecc885in 1 report
- 2bab40c55637398f…ea564d595c7fin 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.