[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fbpX9VJjKlR7XhwlZl2DR1f7-5kJfSSF8OIwcOVAsIsU":3},{"success":4,"data":5},true,{"name":6,"slug":7,"aliases":8,"description":9,"country":10,"suspected_sponsor":11,"target_industries":12,"target_countries":13,"incident_types":14,"references":15,"techniques":18,"technique_count":19,"created_at":20,"seoMetadata":21,"schemaOrg":25},"TunnelSnake","tunnelsnake",[],"The TunnelSnake campaign demonstrates the activity of a sophisticated actor that invests significant resources in designing an evasive toolset and infiltrating networks of high-profile organizations. By leveraging Windows drivers, covert communications channels and proprietary malware, the group behind it maintains a considerable level of stealth. That said, some of its TTPs, like the usage of a commodity webshell and open-source legacy code for loading unsigned drivers, may get detected and in fact were flagged by Kaspersky's product, giving them visibility into the group’s operation.","CN",null,[],[],[],[16,17],"https:\u002F\u002Fwww.redpacketsecurity.com\u002Foperation-tunnelsnake\u002F","https:\u002F\u002Fsecurelist.com\u002Foperation-tunnelsnake-and-moriya-rootkit\u002F101831\u002F",[],0,"2023-12-03T02:15:02.55134+00:00",{"title":22,"metaDescription":23,"keywords":24},"TunnelSnake Threat Actor Profile | EdgeProtect","The TunnelSnake campaign demonstrates the activity of a sophisticated actor that invests significant resources in designing an evasive toolset and inf...","TunnelSnake, threat actor, APT, cyber threat, threat intelligence, CN",{"@context":26,"@type":27,"name":6,"alternateName":28,"description":9,"url":29,"mainEntityOfPage":30,"location":32},"https:\u002F\u002Fschema.org","Organization",[],"http:\u002F\u002Flocalhost:3000\u002Fthreat-actors\u002Ftunnelsnake",{"@type":31,"@id":29},"WebPage",{"@type":33,"name":10},"Country"]