Operation OTHER 2026()  2025()  2024()  2023()  2022()  OTHER() 

DATE

NAME

INFO

CATEGORY

SUBCATE

2021

Operation GhostShell

In July 2021, the Cybereason Nocturnus and Incident Response Teams responded to Operation GhostShell, a highly-targeted cyber espionage campaign targeting
the Aerospace and Telecommunications industries mainly in the Middle East

OPERATION

OPERATION

19.3.21

O p e r a t i o n Diànxùn

In this attack, we discovered malware using similar tactics, techniques, and procedures (TTPs) to those observed in earlier campaigns publicly attributed to the
threat actors RedDelta and Mustang Panda.

OPERATION

OPERATION

26.2.21

Operation ‘Dream Job’

During June-August of 2020, ClearSky’s team had investigated an offensive campaign attributed with high probability to North Korea, which we call “Dream Job”.

OPERATION

OPERATION

15.1.21

Operation Spalax

ESET researchers uncover attacks targeting Colombian government institutions and private companies, especially from the energy and metallurgical industries

OPERATION

OPERATION

18.12.20

Operation SignSight

Just a few weeks after the supply-chain attack on the Able Desktop software, another similar attack occurred on the website of the
Vietnam Government Certification Authority (VGCA): 
ca.gov.vn.

OPERATION

OPERATION

12.12.20

Operation StealthyTrident

LuckyMouse, TA428, HyperBro, Tmanger and ShadowPad linked in Mongolian supply-chain attack

OPERATION

OPERATION

30.11.20

Dark Caracal

As the modern threat landscape has evolved, so have the actors. The barrier to entry for cyber-warfare has continued to decrease, which means new nation states

OPERATION

OPERATION

30.11.20

Operation Manul

This report covers a campaign of phishing and malware which we have named “Operation Manul” and which, based on the available evidence, we believe is likely to
1 have been carried out on behalf of the government of Kazakhstan against journalists.

OPERATION

OPERATION

20.11.20

Operation PowerFall

In May 2020, Kaspersky technologies prevented an attack on a South Korean company by a malicious script for Internet Explorer.

OPERATION

OPERATION

17.11.20

Operation-Blockbuster

The Lazarus group was first identified in Novetta’s report Operation Blockbuster in February 2016

OPERATION

OPERATION

7.11.20

Operation (노스 스타) North Star

We are in the midst of an economic slump, with more candidates than there are jobs, something that has been leveraged by malicious actors to lure unwitting
victims into opening documents laden with malware.

OPERATION

OPERATION

7.11.20

Operation North Star

It is rare to be provided an inside view on how major cyber espionage campaigns are conducted within the digital realm.

OPERATION

OPERATION

7.11.20

Operation North Star:

McAfee’s initial research into Operation North Star revealed a campaign that used social media sites, spearphishing and weaponized documents to target employees
working for organizations in the defense sector.

OPERATION

OPERATION

7.11.20

INJ3CTOR3 Operation

Recently, Check Point Research encountered a series of worldwide attacks relevant to VoIP, specifically to Session initiation Protocol (SIP) servers.

OPERATION

OPERATION

31.10.20

Uncovering DRBControl

The DRBControl campaign attacks its targets using a variety of malware and techniques that coincide with those used in other known cyberespionage campaigns.

OPERATION

OPERATION

31.10.20

Operation Earth Kitsune

A watering hole campaign we dubbed as Operation Earth Kitsune is spying on users’ systems through compromised websites.

OPERATION

OPERATION

23.9.20

Operation DisrupTor

Today, a coalition of law enforcement agencies across the world announced the results of a coordinated operation known as DisrupTor which targeted vendors and
buyers of illicit goods on the dark web.

OPERATION

OPERATION

24.8.20

Mispadu

In this installment of our blog series, we will focus on Mispadu, an ambitious Latin American banking trojan that utilizes McDonald’s malvertising and extends its
attack surface to web browsers.

OPERATION

OPERATION

24.8.20

Mekotio

In this installment of our series, we introduce Mekotio, a Latin American banking trojan targeting mainly Brazil, Chile, Mexico, Spain, Peru and Portugal.

OPERATION

OPERATION

24.8.20

Casbaneiro

Most reverse engineers would agree that quite often one can learn something new on the job. However, it is not every day you learn how to cook a delicious meal
while analyzing malware.

OPERATION

OPERATION

24.8.20

Grandoreiro

Although it’s been some weeks since the height of the income tax season in many countries around the globe, the year 2020 has been looking less than normal
even for cybercriminal activity.

OPERATION

OPERATION

21.8.20

Operation Transparent tribe

The APT group Transparent Tribe is mounting an ongoing cyberespionage campaign, researchers said, which is aimed at military and diplomatic targets around the world.

OPERATION

OPERATION

30.7.20

‘Ghostwriter’ Influence Campaign:

Unknown Actors Leverage Website Compromises and Fabricated Content to Push Narratives Aligned with Russian Security Interests

OPERATION

OPERATION

30.7.20

Operation North Star

North Korea-linked hackers continue to be very active in this period, researchers reported a campaign aimed at the US defense and aerospace sectors.

OPERATION

OPERATION

17.7.20

Operation In(ter)ception

At the end of last year, we discovered targeted attacks against aerospace and military companies in Europe and the Middle East, active from September to December 2019.

OPERATION

OPERATION

27.3.20

Operation Poisoned News

Experts observed a campaign aimed at infecting the iPhones of users in Hong Kong with an iOS backdoor that allows attackers to spy on them.

OPERATION

OPERATION

23.3.20

Operation Pangea

Operation Pangea is the name of a joint international operation lead by the Interpol that seized €13 million in counterfeit drugs for care.

OPERATION

OPERATION

17.2.20

Fox Kitten Campaign

Iranian hackers have been hacking VPN servers to plant backdoors in companies around the world Iran-linked attackers targeted Pulse Secure, Fortinet,
Palo Alto Networks, and Citrix VPNs to hack into large companies as part of the Fox Kitten Campaign.

OPERATION

OPERATION

28.1.20

Operation Night Fury

Group-IB helps take down a cybergang behind the infection of hundreds of websites all over the world

OPERATION

OPERATION

22.1.20

OP Glowing Symphony

US military claims to have disrupted the online propaganda activity of the Islamic State (ISIS) in a hacking operation dating back at least to 2016.

OPERATION

OPERATION

2019

Glupteba Expands Operation

Glupteba was first spotted in 2011 as a malicious proxy generating spam and click-fraud traffic from a compromised machine.

OPERATION

OPERATION

19.10.19

OPERATION GHOST

ESET researchers describe recent activity of the infamous espionage group, the Dukes, including three new malware families

OPERATION

OPERATION

7.6.19

Operation WebStorage

The campaign uses compromised routers and man-in-the-middle attacks to target legitimate ASUS WebStorage software to distribute the Plead malware.

OPERATION

OPERATION

11.6.19

Operation MuddyWater POWERSTATS V3

The campaign targets a range of sectors with spear-phishing emails delivered from legitimate compromised accounts to drop a PowerShell-based backdoor labeled POWERSTATS v3.

OPERATION

OPERATION

11.6.19

Operation ShellTea

The campaign targets the hotel and entertainment sectors with spear-phishing emails to infiltrate systems with the ShellTea backdoor.

OPERATION

OPERATION

11.6.19

Operation HAWKBALL

The campaign targets the government sector in Central Asia with malicious documents that take advantage of vulnerabilities in Microsoft Office to drop the HAWKBALL backdoor.

OPERATION

OPERATION

10.6.19

Operation Frankenstein

The campaign used a range of open-source tools to carry out their attacks including Microsoft's MSbuild, the post-exploitation framework FruityC2, and PowerShell Empire.

OPERATION

OPERATION

27.6.19

Operation TA505 Shifting Tactics

The group behind the operation target users in South Korea, China, and Taiwan with new tactics, techniques, and procedures including Amadey to distribute EmailStealer, using V
BA macro and Excel 4.0 macro.

OPERATION

OPERATION

27.6.19

Operation Waterbug New Toolset

The threat actor behind the operation launched a series of attacks in the last 18 months against multiple sectors including government, IT, communications, and education.

OPERATION

OPERATION

27.6.19

Operation Soft Cell

The campaign has been active since at least 2012 and targets telecommunications providers in multiple countries. T

OPERATION

OPERATION

28.5.19

Operation SharePoint Middle East

The campaign targeted Microsoft SharePoint servers located at Middle Eastern government organizations to steal sensitive information.

OPERATION

OPERATION

28.5.19

Operation BlackWater

The campaign used trojanized documents attached to phishing emails to steal sensitive information from victims located in the Middle East.

OPERATION

OPERATION

26.6.19

ViceLeaker Operation

In May 2018, we discovered a campaign targeting dozens of mobile Android devices belonging to Israeli citizens.

OPERATION

OPERATION

14.5.19

Operation Daybreak

Earlier this year, we deployed new technologies in Kaspersky Lab products to identify and block zero-day attacks.

OPERATION

OPERATION

23.4.19

Operation ShadowHammer

In late March 2019, we briefly highlighted our research on ShadowHammer attacks, a sophisticated supply chain attack involving ASUS Live Update Utility, which was
featured in a Kim Zetter article on Motherboard.

OPERATION

OPERATION

26.3.19

Operation SaboTor

Today, members of the Joint Criminal Opioid and Darknet Enforcement (J-CODE) team announce the results of Operation SaboTor, a coordinated international effort
targeting drug trafficking organizations operating on the Darknet.

OPERATION

OPERATION

26.3.19

Operation ShadowHammer

Earlier today, Motherboard published a story by Kim Zetter on Operation ShadowHammer, a newly discovered supply chain attack that leveraged ASUS Live Update software.

OPERATION

OPERATION

5.3.19

#OpJerusalem

Over the weekend, hundreds of popular Israeli sites were targeted by an attack called #OpJerusalem whose goal was to infect Windows users with the JCry ransomware.

OPERATION

OPERATION

2018

Operation Soft Cell

In 2018, the Cybereason Nocturnus team identified an advanced, persistent attack targeting global telecommunications providers carried out by a threat actor using t
ools and techniques commonly associated with Chinese-affiliated
..

OPERATION

OPERATION

12.12.18

Operation Sharpshooter

The McAfee Advanced Threat Research team and McAfee Labs Malware Operations Group have discovered a new global campaign targeting nuclear, defense, energy,
 and financial companies.

OPERATION

OPERATION

17.11.18

Operation Oceansalt

A wall eight feet high with three strands of barbed wire is considered sufficient to deter a determined intruder, at least according to the advice offered by the
CISSP professional certification.

OPERATION

OPERATION

14.11.18

OperationShaheen

We have dubbed the first campaignOperation Shaheen. It examines complex espionage effort directed military Pakistani the at

OPERATION

OPERATION

4.5.18

ZOO. CYBERESPIONAGE OPERATION

ZooPark is a cyberespionage operation that has been focusing on Middle Eastern targetssince at least June 2015.

OPERATION

OPERATION

4/5/18

OpIsrael 2018

OpIsrael is a yearly campaign created by Anonymous in 2012 with the stated goal of “erasing Israel from the internet” in protest against the Israeli government’s
conduct in the Israli-Palestinian conflict.

OPERATION

OPERATION

12/21/18

OpCatalunya: Phase 4

In October 2017, citizens of Catalonia – an autonomous community in Spain - held an independence referendum.

OPERATION

OPERATION

17.12.18

Operation Dragonfly

On September 6, Symantec published details of the Dragonfly campaign, which targeted dozens of energy companies throughout 2017.

OPERATION

OPERATION

12/14/17

OpKillingBay/OpWhales

With a new whale hunting season comes a new wave of attacks by environmental and animal rights hacktivist communities within the Anonymous collective.

OPERATION

OPERATION

12/12/17

OpUSA / OpIsrael

In 1995, the United States Congress passed the Jerusalem Embassy Act, which was created for the purposes of initiating and funding the relocation of the
Embassy of the United States in Israel from Tel Aviv to Jerusalem.

OPERATION

OPERATION

10/31/17

OpCatalonia

At the beginning of October 2017, citizens of Catalonia – an autonomous community in Spain - held an independence referendum.

OPERATION

OPERATION

6/8/17

OpIcarus2017

OpIcarus is a multiphase operation originally launched by Anonymous on February 8, 2016 and is now entering its fifth phase on June 11, 2017. Its

OPERATION

OPERATION

6/7/17

OpSingleGateway

In the first week of June there has been a dramatic increase in activity from #OpSingleGateway, an Anonymous operation designed to combat the government of
Thailand’s strategy to implement central control of the nation’s Internet,.

OPERATION

OPERATION

6/5/17

OpKillingBay 2017

OpKillingBay is a yearly hacktivism operation by Anonymous, activists, and others organizations in response to the hunting of whales and dolphins in Japan.

OPERATION

OPERATION

3/28/17

OpIsrael 2017

With the stated goal of "erasing Israel from the Internet,” Anonymous will launch OpIsrael 2017, its yearly cyber operation against Israel on April 7, 2017.

OPERATION

OPERATION

1/17/17

OpSingleGateway:

In a move to combat the government of Thailand’s strategy to implement central control of the nation’s Internet, Anonymous has launched OpSingleGateway.

OPERATION

OPERATION

11/10/16

OpKillingBay 2016 Update

Online protests in the form of network and application attacks against countries and organizations involved in whale and dolphin hunting has become an integral part of hunting season.

OPERATION

OPERATION

9/19/16

OpNoDAPL

The Dakota Access Pipeline Project (DAPL) is the construction of a 1,172-mile-long pipeline that will span across three states.

OPERATION

OPERATION

6/8/16

OpIcarus Project Mayhem

Anonymous has initiated the third and final phase of OpIcarus: “Project Mayhem” – a systematic cyber assault against worldwide stock exchanges.

OPERATION

OPERATION

5/18/16

OperationLGBT

Anonymous has launched OpLGBT, a DDoS campaign targeting the state of North Carolina and its governmental institutes in response to controversial legislation passed by
the state’s General Assembly
.

OPERATION

OPERATION

5/6/16

OpIcarus Re-Engaged

The Hacktivist Group Anonymous announced its plans to relaunch its cyber assaults on leading financial services companies worldwide.

OPERATION

OPERATION

4/25/16

OpOperadoras

In an effort to fight for the rights of digital consumers throughout South America, the hacktivist group Anonymous has launched OpOperadoras,i coordinated cyber assault against
Brazilian telecommunication companies.

OPERATION

OPERATION

4/5/16

OpIsrael Update - April 2016

With the stated goal of “erasing Israel from the internet” in protest against claimed crimes against the Palestinian people, Anonymous will launch its yearly operation against Israel.

OPERATION

OPERATION

4/4/16

OpTrump Attacks & Other DDoS

Since our previous OpWhiteRose vs Donald Trump ERT alert outlining the potential cyber-attack against Donald Trump on April fool's day, the presidential candidate was eventually hit
and online entities of key Trump.

OPERATION

OPERATION

3/24/16

OpWhiteRose vs Donald Trump

Donald Trump and his presidential campaign has gained a new round of attention from the Anonymous collective.

OPERATION

OPERATION

3/16/16

OpRight2Rest

The hacktivist group Anonymous launched an operation against the city of Denver, CO and its officials. Entitled OpRight2Rest, the operation is a response to the
passing of the Denver Homeless Camping Ban.

OPERATION

OPERATION

3/14/16

OpAbdiMohamed

The hacktivist group New World Hackers is currently targeting the capital and most populous city of Utah, Salt Lake City, as part of a new operation, OpAbdiMohamed.

OPERATION

OPERATION

3/10/16

OpAfrica Update - March 2016

The hacktivist group Anonymous has upped the ante in its cyber-assault against corporations and government that "enable and perpetuate corruption on the African continent."

OPERATION

OPERATION

2/26/16

OpIsrael Update - February 2016

With the stated goal of "erasing Israel from the internet" in protest against claimed crimes against the Palestinian people, Anonymous will launch its yearly operation against Israel.

OPERATION

OPERATION

2/24/16

OpGaston

Hacktivists have targeted the Cincinnati Police Department after last week’s police shooting of Paul Gaston.

OPERATION

OPERATION

2/16/16

OpAfrica

The hacktivist group Anonymous is back, this time fighting corruption across the continent of Africa.

OPERATION

OPERATION

2/11/16

OpKillingBay Update - February 2016

OpKillingBay is an annual campaign that was started in 2013 by Anonymous. It was created by Anonymous to bring attention to the hunting of whales and
dolphins in Japan and Denmark.

OPERATION

OPERATION

2/8/16

OpIcarus

The hacktivist group Anonymous announced its plan to attack leading financial services companies on Monday, February 8, 2016, starting at 6AM UTC with the
goal of taking down their websites and services.

OPERATION

OPERATION

12/18/15

OpTrump

On December 11, 2015 Anonymous announced Operation Trump (#OpTrump), a three phase hacking campaign to "expose the real Donald Trump" and take down
the presidential candidate's online footprint

OPERATION

OPERATION

12/1/15

OpParis Update

OpParis has faced a number of challenges since the launch of its operation.

OPERATION

OPERATION

11/16/15

OpKillingBay Update

OpKillingBay, the annual campaign created by Anonymous, has continued into November and predicted to remain until the end of dolphin hunting season.

OPERATION

OPERATION

11/10/15

OpParis

Radware's ERT has been investigating OpParis, an Anonymous revenge campaign against ISIS for the Paris attacks on November 13, 2015.

OPERATION

OPERATION

10/26/15

OpKillingBay

OpKillingBay is an annual campaign created by Anonymous, activists and other organizations in response to whale and dolphin hunting in Japan and Denmark.

OPERATION

OPERATION

4/17/15

OpISIS

Islamic State in Iraq and Syria (ISIS), an Al-Qaeda splinter group, is infamously known for its malicious, physical attacks. Recently, however, ISIS has been credited
with cyber-attacks.

OPERATION

OPERATION

3/30/15

OpIsrael 2015

OpIsrael 2015 is an organized set of attacks aimed at the Israeli government, public institutions and other high profile Web sites.

OPERATION

OPERATION

7/11/14

OpSaveGaza

Due to the growing tension between Palestine and Israel that includes military actions in the sector of Gaza, several hacktivists groups have united in a cyber-attack

campaign against Israel, named #OpSaveGaza.

OPERATION

OPERATION

15.7.14

OPERATION WINDIGO

This document details a large and sophisticated operation, code named “Windigo”, in which a malicious group has compromised thousands of Linux and Unix servers.

OPERATION

OPERATION

4/7/14

OpIsrael 2014

#OpIsrael is an organized set of attacks aimed at Israeli Web sites, which was officially first launched on 14 November, 2012 against the Israeli government, public
institutions and other high profile Web sites.

OPERATION

OPERATION

7/26/13

#OpAbabil Phase 4

In early September 2012, videos of about 14 minutes in length that claimed to be trailers of a longer film named “Innocence of Muslims” were uploaded to YouTube.

OPERATION

OPERATION

4/30/13

OPUSA

AnonGhost – A hacking group affiliated with Anonymous announced a new cyber-attack campaign against US websites named #OPUSA, scheduled for May 7th, 2013.

OPERATION

OPERATION

4/7/13

OpIsrael

Various anti-Israeli hacking groups join hands to launch a massive cyber attack on Israeli cyber space with the aim to disconnect the country from the Internet.

OPERATION

OPERATION

2011

OPERATION POTAO EXPRESS

The Operation Potao Express whitepaper presents ESET’s latest findings based on research into the Win32/Potao malware family.

OPERATION

OPERATION