MurenShark is an APT group targeting Turkish military and academic institutions with advanced counter-analysis and phishing tactics.
Analyst brief
MurenShark (Actor210426) is an advanced persistent threat group operating primarily in the Middle East, targeting military projects, research institutes, and universities, with a specific focus on Turkey. The group is highly skilled in counter-analysis and employs sophisticated evasion tactics, using compromised websites as file servers and C2 servers. Key TTPs include targeted phishing operations utilizing tools such as NiceRender. Defenders should focus on monitoring for suspicious traffic to seemingly legitimate but compromised domains and implement advanced email security measures.
MurenShark
Actor210426
unknown
MurenShark is an advanced persistent threat group that operates primarily in the Middle East, with a focus on targeting Turkey. They have shown interest in military projects, as well as research institutes and universities. This group is highly skilled in counter-analysis and reverse traceability, using sophisticated tactics to avoid detection. They utilize compromised websites as file servers and command and control servers, and have been known to use attack tools like NiceRender for phishing purposes.