Home > List all groups > List all tools > List all groups using tool Whisky

Threat Group Cards: A Threat Actor Encyclopedia

Names	Whisky
Category	Malware
Type	Loader
Description	(Citizen Lab) Whisky’s first step is to determine which shared library (.so) file should be overwritten by the next stage of MOONSHINE — called “Bourbon” by developers — by determining the current application context from the current working directory.
Information	<https://citizenlab.ca/2019/09/poison-carp-tibetan-groups-targeted-with-1-click-mobile-exploits/>

Last change to this tool card: 20 April 2020

Download this tool card in JSON format

1 group listed (1 APT, 0 other, 0 unknown)

APT groups