Kasablanka
Intelligence Profile
The Kasablanka group is a cyber-criminal organization that has
specifically targeted Russia between September and December 2022,
using various payloads delivered through phishing emails containing
socially engineered lnk files, zip packages, and executables attached to
virtual disk image files.
Threat Analysis
Kasablanka is a known-sophistication threat actor attributed to MA, engaged in cyber operations with a primary motivation of unknown activity patterns.
Known Campaigns
Kasablanka is a unknown-motivation threat actor attributed to MA. The Kasablanka group is a cyber-criminal organization that has specifically targeted Russia between September and December 2022, using various payloads delivered through phishing emails containing socially engineered lnk files, zip packages, and executables attached to virtual di...