NEODYMIUM (G0055) is an activity group deploying FinFisher-like Wingbird backdoor against individual computers.
NEODYMIUM (G0055) is an activity group that employs the Wingbird backdoor malware, which closely resembles the government-grade commercial surveillance package FinFisher. Their operations typically target individual computers rather than entire networks. Defenders should monitor endpoints for suspicious processes, C2 communications, and unauthorized data exfiltration associated with Wingbird.
NEODYMIUM is an activity group that is known to use a backdoor malware detected by Microsoft as Wingbird. This backdoor’s characteristics closely match FinFisher, a government-grade commercial surveillance package. Data about Wingbird activity indicate that it is typically used to attack individual computers instead of networks.
The NEODYMIUM group uses a backdoor malware called Wingbird.
Their operations typically target individual computers rather than entire networks.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.