KINWILDER

DarkHotel

No sourced public emblem in this profile.

reference profile · reported nexus: KR (not nationality)

Kaspersky described DarkHotel in a 2014 report as: '... DarkHotel drives its campaigns by spear-phishing targets with highly advanced Flash zero-day exploits that effectively evade the latest Windows and Adobe defenses, and yet they also imprecisely spread among large numbers of vague targets with peer-to-peer spreading tactics. Moreover, this crews most unusual characteristic is that for several years the Darkhotel APT has maintained a capability to use hotel networks to follow and hit selected targets as they travel around the world.'

Source-reported aliases: DUBNIUM, Fallout Team, Karba, Luder, Nemim, Nemin, Tapaoux, Pioneer, Shadow Crane, APT-C-06, SIG25, TUNGSTEN BRIDGE, T-APT-02, G0012, ATK52, Zigzag Hail. Associations do not prove equivalence.

Target geography

Catalog-listed countries (associations, not attack counts): Japan · Russia · Taiwan · South Korea · China

No bound claim-post feed for this label.

Historical casebook

No dated record curated yet; absence does not establish inactivity.

Planned Kinwilder coverage

Tentative editorial review windows, contingent on evidence and review; not promised publication dates or predictions of attacks.

No assigned review window.

References

Pinned source catalog

https://securelist.com/blog/research/71713/darkhotels-attacks-in-2015/

https://blogs.technet.microsoft.com/mmpc/2016/06/09/reverse-engineering-dubnium-2

https://securelist.com/blog/research/66779/the-darkhotel-apt/

https://securelist.com/the-darkhotel-apt/66779/

https://web.archive.org/web/20160104165148/http://drops.wooyun.org/tips/11726

https://labs.bitdefender.com/wp-content/uploads/downloads/inexsmar-an-unusual-darkhotel-campaign/

https://www.cfr.org/interactive/cyber-operations/darkhotel

https://www.securityweek.com/darkhotel-apt-uses-new-methods-target-politicians

https://attack.mitre.org/groups/G0012/

https://www.secureworks.com/research/threat-profiles/tungsten-bridge

https://www.antiy.cn/research/notice&report/research_report/20200522.html

Submission and profile-update guide · Publisher API

Editorial standard · root@kinwilder.com · RSS · Outpost