baku

Callisto· Russia

Callisto

COLDRIVERSEABORGIUMTA446

unknown

The Callisto Group is an advanced threat actor whose known targets include military personnel, government officials, think tanks, and journalists in Europe and the South Caucasus. Their primary interest appears to be gathering intelligence related to foreign and security policy in the Eastern Europe and South Caucasus regions.

origin (suspected)

Russia

target sectors

Government AdministrationMilitaryThink TanksJournalist

techniques · ATT&CK

Gather Victim Identity Information Spearphishing Attachment Domains Upload Malware Spearphishing Attachment JavaScript Malicious File Valid Accounts+5

malware

Spica

source: misp-galaxy + mitre-attackG1033 33 refs →

FAQ2

In which regions does the Callisto group primarily operate?

Europe and the South Caucasus.

What is one of the malware used by Callisto for initial access?

Spica malware.

Callisto· Russia

Callisto

FAQ2

See also5

Callisto· Russia

Callisto

FAQ2

See also5