ModifiedElephant is a long-undetected threat actor targeting the civil society sector with simple, mundane tools.
Analyst brief
ModifiedElephant is a previously unknown threat actor active for at least a decade, targeting the Civil Society sector. The actor focuses on specific individuals and groups at a regional level, maintaining a limited operational scope. It employs mundane, unsophisticated tools that have allowed it to evade detection for years. Defenders should be vigilant against simple TTPs tailored for regional civil society organizations.
ModifiedElephant
unknown
Our research into these intrusions revealed a decade of persistent malicious activity targeting specific groups and individuals that we now attribute to a previously unknown threat actor named ModifiedElephant. This actor has operated for years, evading research attention and detection due to their limited scope of operations, the mundane nature of their tools, and their regionally-specific targeting. ModifiedElephant is still active at the time of writing.