apt

Earth Bogle

activeAttribution: ModeratePlausible and partly corroborated — some gaps or single-source elements.

APT / State-sponsored

Attribution

Unattributed — low confidence on sponsor (Arabic-speaking operators)

Origin

Unknown

First seen

2022

Last active

2023

Motivation

Espionage

Attribution confidence

medium

MENA targeting

Middle East and North Africa (broad, Arabic-speaking targets)

Sectors

General/opportunistic, cross-sector via geopolitical lures

Why it mattersState-sponsored / APT actor, medium confidence, documented targeting Middle East and North Africa (broad, Arabic-speaking targets) (General/opportunistic, cross-sector via geopolitical lures sectors).

What's nextNo pipeline reports reference this actor yet — Radar mentions may still surface early signal.

Associated with

Related to

BahamutactorTechnique overlap
Gaza Cybergang / MoleratsactorTechnique overlap
Group5actorTechnique overlap
Infy / Prince of PersiaactorTechnique overlap
SideWinderactorTechnique overlap
Dark CaracalactorTechnique overlap
Dust SpecteractorTechnique overlap
BladedFelineactorTechnique overlap
APT39 / Chafer

Indicators

No indicators linked yet

IOC extraction runs nightly against new reporting on this actor. Check back after tomorrow's corpus refresh.

Useful?

Uses

Process InjectiontechniqueATT&CK mapping
MasqueradingtechniqueATT&CK mapping
PhishingtechniqueATT&CK mapping
Boot or Logon Autostart Execution: Registry Run Keys / Startup FoldertechniqueATT&CK mapping
Command and Scripting Interpreter: PowerShelltechniqueATT&CK mapping
Web ServicetechniqueATT&CK mapping
Command and Scripting InterpretertechniqueATT&CK mapping
Command and Scripting Interpreter: Visual BasictechniqueATT&CK mapping
Screen CapturetechniqueATT&CK mapping
Automated CollectiontechniqueATT&CK mapping
User Execution: Malicious FiletechniqueATT&CK mapping
Ingress Tool TransfertechniqueATT&CK mapping
Obfuscated Files or InformationtechniqueATT&CK mapping