Threat Intelligence Feed
G1002 - BITTER
IoCs Available
Maltiverse provides fresh IoCs in form of Threat Intelligence Feeds that you can download or sync with your SIEM/SOAR/Firewall/EDR
G1002 – BITTER is a suspected South Asian cyber espionage threat group that has been active since at least 2013. BITTER has primarily targeted Government, energy, and engineering organizations in Pakistan, China, Bangladesh, and Saudi Arabia.
Forcepoint Security Labs recently encountered a strain of attacks that appear to target Pakistani nationals. We named the attack “BITTER” based on the network communication header used by the latest variant of remote access tool (RAT) used.
TAXII Server
Are you looking a for TAXII Server to connect?
TAXII Server
Sync Maltiverse Feeds via TAXII with your Security Devices
Setup TAXII