COLDWASTREL is a cyber threat actor identified in October 2022, primarily engaged in information gathering through highly targeted spear-phishing campaigns. While their true affiliations remain unclear, their targeting aligns with the interests of the Russian government, focusing on entities perceived as adversaries of Russia. Researchers distinguish COLDWASTREL from the Russian state-sponsored group COLDRIVER (also known as Star Blizzard and Callisto), noting differences in their tactical approaches and infrastructure usage despite superficial similarities in their social engineering methods. COLDWASTREL specializes in credential harvesting and has evolved its tactics over time, including employing fake domains to impersonate legitimate organizations.

Aliases del actor

APT COLDWASTREL

Actores similares

apt-coldwastrelactor · 1apt-45actor · 2apt-c-27actor · 2apt-c-01actor · 2apt-c-12actor · 1apt-18actor · 1apt-1877teamactor · 1apt-27actor · 1apt-30actor · 1apt-38actor · 1