General description
The cyber-espionage group TaskMasters was discovered in 2018 by PT Expert Security Center specialists. The group has been active at least since 2010. The targeted organizations include major industrial and energy enterprises, public structures, and transport companies. The group attacks companies of various countries, although most victims are in Russia and CIS countries.
Objectives
- Espionage
Tools
- Service utility
- RemShell downloader
- RemShell backdoor
- PhantomShell backdoor
- InteractiveShell backdoor
Targeted countries
Armenia
Belarus
Kazakhstan
Kyrgyzstan
Moldova
Mongolia
Russia
Vietnam
Tajikistan
Uzbekistan
Alternative names
- BlueTraveller
Targeted sectors:
- Manufacturing and industry
- The energy sector
- State structures
- Transportation companies