Comprehensive List of Jordanian APT Groups

Jordan has been subject to various cyber activities, including espionage and cybercrime, often influenced by regional tensions and geopolitical interests. While there are no widely recognized Advanced Persistent Threat (APT) groups originating directly from Jordan, the country has been targeted by several known APT groups. Here is an overview of notable APT activities linked to Jordan:

APT34 (OilRig)

• Description: APT34, also known as OilRig, is an Iranian-linked APT group that has targeted multiple sectors across the Middle East, including Jordan. The group is known for cyber espionage activities.
• Activities: Engages in cyber espionage by deploying malware through spear-phishing and watering hole attacks.
• Tools: BONDUPDATER, OopsIE, QUADAGENT.
• Sources: FireEye, Palo Alto Networks, Symantec​ (CISA)​​ (Cyfirma)​.

MuddyWater (Seedworm)

• Description: MuddyWater, another Iranian-linked APT group, has conducted operations targeting organizations in Jordan as part of its broader regional espionage activities.
• Activities: Focuses on cyber espionage, targeting government, telecommunications, and oil sectors.
• Tools: Uses PowerShell-based tools and custom malware for long-term espionage.
• Sources: Microsoft, Trend Micro, Secureworks​ (CISA)​​ (Cyfirma)​.

APT33 (Elfin Team)

• Description: APT33, also linked to Iran, has been reported to target entities in Jordan, focusing on cyber espionage in the energy and aerospace sectors.
• Activities: Uses spear-phishing campaigns to deploy malware and gather intelligence.
• Tools: SHAPESHIFT, TURNEDUP, DROPSHOT.
• Sources: FireEye, Symantec, CrowdStrike​ (CISA)​​ (Cyfirma)​.

APT35 (Charming Kitten)

• Description: Charming Kitten, another Iranian-linked APT group, has targeted entities in Jordan as part of its regional cyber espionage efforts.
• Activities: Conducts spear-phishing campaigns and uses custom malware to infiltrate and monitor targets.
• Tools: Various custom-developed tools and phishing kits.
• Sources: ClearSky, FireEye, Recorded Future​ (CISA)​​ (Cyfirma)​.

Regional Cybercrime Activities

• Description: Jordan has also faced cybercrime activities targeting financial institutions and governmental entities. These activities are often influenced by regional conflicts and political dynamics.
• Activities: Involves ransomware attacks, data breaches, and financial fraud operations.
• Tools: Utilizes off-the-shelf malware, ransomware, and phishing techniques.
• Sources: Kaspersky, Symantec, local cybersecurity reports​ (CISA)​​ (Cyfirma)​.

Conclusion

Jordan is primarily a target for several regional APT groups, particularly those linked to Iran. These groups engage in cyber espionage and cybercrime, focusing on critical sectors such as telecommunications, government, and energy. The regional geopolitical tensions continue to drive these cyber activities.

Get Aardvark Infinity’s stories in your inbox

Join Medium for free to get updates from this writer.

Remember me for faster sign in

Tags: #Cybersecurity #APTGroups #Jordan #CyberEspionage #RegionalConflict

References:

• FireEye
• Palo Alto Networks
• Symantec
• Microsoft
• Trend Micro
• Secureworks
• Kaspersky
• ClearSky
• Recorded Future

AI, SCRIPTING, CYBERSECURITY

ChatGPT - Guardian AI (Anti-RAT System)

### Title: “Jordanian Flag Fiasco”

### Description:
This vibrant and hyperrealistic 3D image captures a comedic scene on a lively Jordanian street where friends humorously struggle to hoist an oversized Jordanian flag. One friend is tangled in the flag, another is being lifted off the ground, and a curious goat is nibbling at the flag. The background features street vendors, traditional buildings, and people going about their day. Detailed textures and expressive characters highlight the humor and liveliness of the scene.

### Macro Details:
- A bustling Jordanian street with traditional buildings and market stalls.
- Friends struggling with an oversized Jordanian flag.
- A curious goat interacting with the flag.

### Micro Details:
- Humorous expressions on the friends’ faces.
- Detailed textures on the flag, goat, and street surroundings.
- Realistic background with market activity and traditional decor.

### Meta Data:
- **Creation Date:** July 21, 2024
- **Dimensions:** 1792x1024 pixels
- **File Format:** PNG
- **File Size:** 4.7 MB
- **Artist:** HyperReal Vault
- **Tags:** #JordanianFlag #StreetComedy #Hyperrealism #Jordan #FlagStruggle