Also known as: Tapaoux, Luder, APT-C-06, Pioneer, TUNGSTEN BRIDGE, Zigzag Hail, SIG25, G0012, Fallout Team, ATK52, Nemin, Shadow Crane, DUBNIUM, T-APT-02, Nemim, Karba
Kaspersky described DarkHotel in a 2014 report as: '... DarkHotel drives its campaigns by spear-phishing targets with highly advanced Flash zero-day exploits that effectively evade the latest Windows and Adobe defenses, and yet they also imprecisely spread among large numbers of vague targets with peer-to-peer spreading tactics. Moreover, this crews most unusual characteristic is that for several years the Darkhotel APT has maintained a capability to use hotel networks to follow and hit selected targets as they travel around the world.'
No exploited CVEs have been attributed to this threat actor yet.
Browse CVE Database