GraphicalNeutrino
Aliases: SNOWYAMBER
- First seen
- 2022-07-15 00:00:00
- Malware type
- loader
- Family
- Malware family
- Profile updated
- 2026-07-07 12:43:38
Targeted industries: technology-and-telecommunications government-and-public-sector
Targeted regions: country_code:us country_code:ru
Context
This loader abuses the benign service Notion for data exchange.
Reports & references
- go.recordedfuture.com — Cta 2023 0127 (report)
- mrtiepolo.medium.com — Sophisticated Apt29 Campaign Abuses Notion Api To Target The European Commission 200188059F58 (report)
- blogs.blackberry.com — Nobelium Targets Eu Governments Assisting Ukraine (report)
- go.recordedfuture.com — Cta 2023 0727 1 (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Graphical Neutrino (report)
- gov.pl — Ee91F24D 3E67 436D Aa50 7Fa56Acf789D (report)
- mssplab.github.io — Malware Analysis Apt29 (report)