Catalogue · ID 216

Danger Close: Fancy Bear Tracking of Ukrainian Field Artillery Units

Author: Meyers A.
Year of publication: 2016
Published in: CrowdStrike
Describes Russian colonization of peoples: Ukrainians
Publication rights: not allowed (a 2016 publication under copyright)

Files not published

Where we got it

Original source: www.crowdstrike[.]com/blog/danger-close-fancy-bear-tracking-ukrainian-field-artillery-units/

Where the knowledge base cites it

This material is cited in 1 place.

Procedures

• Continuation of the Russo-Ukrainian War: Armed Aggression in the Donbas (2014–2015) — technique Cyber Operations

  …services to compromise Ukrainian artillerymen's software: "the filename 'Попр-Д30.apk' was linked to a legitimate application which was initially developed domestically within Ukraine by an officer of the 55th Artillery Brigade named Yaroslav Sherstuk," and "in-depth reverse engineering revealed the APK contained an Android variant of X-Agent" - an implant whose exclusive operator is FANCY BEAR