NEODYMIUM — ATT&CK threat group profile

Overview

NEODYMIUM is an activity group that conducted a campaign in May 2016 and has heavily targeted Turkish victims. The group has demonstrated similarity to another activity group called PROMETHIUM due to overlapping victim and campaign characteristics. NEODYMIUM is reportedly associated closely with BlackOasis operations, but evidence that the group names are aliases has not been identified.

Naming & attribution

NEODYMIUM is tracked under 1 names across the industry. It uses 0 documented ATT&CK techniques — more than 0% of the 174 groups tracked here.

Who calls this group what — MITRE lists each alias with the report that used it, but not which vendor coined it.
Name	First reported by
NEODYMIUM	Microsoft

Tools & malware (1)

Wingbird

Reporting (3)

Middle Eastern hacking group is using FinFisher malware to conduct international espionage — Bing, C
Twin zero-day attacks: PROMETHIUM and NEODYMIUM target individuals in Europe — Microsoft
Microsoft Security Intelligence Report Volume 21 — Anthe, C. et al