Operation Rusty Flag

Description

(Deep Instinct) The operation has at least two different initial access vectors.

The operation is not associated with a known threat actor; the operation was instead named because of their novel malware written in the Rust programming language.

One of the lures used in the operation is a modified document that was used by the Tropical Scorpius, RomCom group. This could be a deliberate “false flag”.

Names

NameName-Giver
Operation Rusty FlagDeep Instinct

Country

Motivation

  • Information theft and espionage

First Seen

2023

Observed Countries

Information

Other Information

Uuid

ae038cc4-4e81-4107-bfef-32646c33fb5d

Last Card Change

2023-10-12