Unit 8200 (Duqu Group) is an Israeli nation-state actor known for the Duqu malware platform and advanced data exfiltration.
Unit 8200 (Duqu Group) is an Israeli nation-state cyber threat actor. It primarily targets military, government, and private sector entities in countries such as Iran and Sudan. The group is known for the Duqu malware platform, leveraging advanced keylogging, data exfiltration, and C2 communication techniques. Defenders should focus on network anomaly detection, lateral movement, and enhanced monitoring of suspicious PowerShell/CLI activities.
Unit 8200 İsrail mənşəli threat actor-dur və əsasən İran və Sudanda hərbi, dövlət və private sector qurumlarını hədəf alır.
Unit 8200 primarily targets military, government, and private sector entities in countries such as Iran and Sudan.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.