InvisiMole
Adversary group targeting diplomatic missions, governmental and military organisations, mainly in Ukraine.
target countries (as stated by the source)
Ukraine
target sectors
Government
source: misp-galaxy2 refs →
InvisiMole
InvisiMole is a cyber espionage group targeting Ukrainian government and military entities.
Analyst brief
InvisiMole is a threat actor focused on targeting government entities in Ukraine. Their victims include diplomatic missions, governmental, and military organizations. While specific TTPs and tools are not detailed, the group is associated with targeted cyber espionage. Defenders should monitor for unusual network activity and unknown malware indicators within the Ukrainian government sector.
unknown
FAQ2
Which country's entities does the InvisiMole group primarily target?
InvisiMole primarily targets government entities in Ukraine.
What type of cyber activity is InvisiMole engaged in?
They are engaged in targeted cyber espionage.
See also6
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.