Red October is a cyber espionage campaign first publicly identified by Kaspersky Lab in January 2013, though forensic evidence indicates its operations began as early as May 2007. Assessed with high confidence to be of Russian origin, the group's primary motivation is intelligence gathering, specifically targeting diplomatic, governmental, and scientific research organizations. What distinguishes Red October is its highly modular and adaptable attack platform, internally dubbed "Rocra," designed for resilient intelligence collection and capable of recovering access to compromised systems even after command-and-control infrastructure is disrupted. The initial campaign largely ceased after its public exposure; however, a successor campaign known as Cloud Atlas emerged in 2014, exhibiting strong technical and targeting similarities, suggesting continued operations by the same or a closely related group.

Aliases del actor

Blue OdinG0100Cloud AtlasAPT REDOCTOBER"RSA incident""Red October"referencias a dominios como www

Actores similares

apt-redoctoberactor · 1apt-redbaldknightactor · 1apt-redfoxtrotactor · 1apt-redjuliettactor · 1apt-atlascrossactor · 1apt-blueprintactor · 1apt-cloudwizardactor · 1apt-driftingcloudactor · 1RedEchoapt · 1Gamaredon Groupapt · 1