The Shadow BrokersThreat actor
- Shadow Brokers
- shadowbrokers
- the shadowbrokers
The Shadow Brokers (TSB) is a hacker group who first appeared in the summer of 2016. They published several leaks containing hacking tools from the National Security Agency (NSA, including several zero-day exploits.[1] Specifically, these exploits and vulnerabilities targeted enterprise firewalls, antivirus software, and Microsoft products.From MISP Galaxy
Last reported 9 years ago, by Group-IB2 reports
ATT&CK techniques
1 technique · each with the sentence it comes from- T1684Social Engineering
“…e regular personnel trainings, which should include not only training sessions on issues related to targeted attacks, phishing and social engineering, but also “combat training”: banks should simulate targeted attacks or phishing emails from time to time.”
What the reports say
2 reports, newest first · the exact sentence from each-
Targeted attacks on banks“When the Shadow Brokers group (for more details about their attacks, see the Forbes material) shared data from a leak from the Equation Group – hackers associated with the US National Security Agency, it became clear that the secret service probably had access to SWIFT and contro…”
-
Echoes of cyberwar“…when these advanced tools are employed by criminal groups: Wanna Cryptor uses EternalBlue, supposedly an NSA exploit released in the Shadow Brokers leak on 14th April.”
Thanks — we review every report.