Opening Forensia workspaceacquiring
Loading the current evidence view. Navigation and account controls remain available.
Loading recent evidenceacquiring
Threat actors
Loading the current evidence view. Navigation and account controls remain available.
Also known as: DustSquad
7
techniques
1
software
10,569
corpus matches
profile
Nomadic Octopus is a Russian-speaking cyber espionage threat group that has primarily targeted Central Asia, including local governments, diplomatic missions, and individuals, since at least 2014. Nomadic Octopus has been observed conducting campaigns involving Android and Windows malware, mainly using the Delphi programming language, and building custom variants.
techniques
7 attributed · most-instrumented first
software
1 malware & tools attributed
Octopus
S0340
read this carefully
10,569 corpus matches is not attribution
That count is indicators which exhibit techniques Nomadic Octopus is known to use. Many unrelated operators use the same techniques. Treat it as a shared-technique signal for hunting, never as first-party attribution to this group.
indicators exhibiting these techniques
Top by severity: each resolves to its own verdict.
showing 30 of 10,569
known aliases
Vendors name the same group differently. Searching any alias reaches this profile.