Threat actor · G0012

Darkhotel

Also known as DUBNIUM, Zigzag Hail.

Darkhotel is a suspected South Korean threat group that has targeted victims primarily in East Asia since at least 2004. The group's name is based on cyber espionage operations conducted via hotel Internet networks against traveling executives and other select guests. Darkhotel has also conducted spearphishing campaigns and infected victims through peer-to-peer and file sharing networks.

ATT&CK techniques

24 mapped

T1016 T1027.013 T1036.005 T1056.001 T1057 T1059.003 T1080 T1082 T1083 T1091 T1105 T1124 T1140 T1189 T1203 T1204.002 T1497 T1497.001 T1497.002 T1518.001 T1547.001 T1553.002 T1566.001 T1573.001