Urpage

Description

(Trend Micro) In the process of monitoring changes in the threat landscape, we get a clearer insight into the way threat actors work behind the schemes. In this case we dig deeper into the possible connection between cyberattacks by focusing on the similarities an unnamed threat actor shares with Patchwork, Dropping Elephant, and another threat actor called Bahamut. For the sake of this report, we will call this unnamed threat actor “Urpage.”

Names

Name	Name-Giver
Urpage	Trend Micro

Country

• Middle East

Sponsor

State-sponsored

Motivation

• Information theft and espionage

First Seen

2018

Observed Countries

• Pakistan

Tools

• Trojaned Android applications

Information

• https://blog.trendmicro.com/trendlabs-security-intelligence/the-urpage-connection-to-bahamut-confucius-and-patchwork/

Other Information

Uuid

894e7bdb-9c99-4021-a673-45ddb9772450

Last Card Change

2020-04-15