← All actors Recent activity

NETTRAVELER

NETTRAVELER

Indicators
45
Source reports
2
Activity span
not dated
Newest indicator
unknown
Upstream change
2026-01-02
20152017

Overview 45 indicators

No published description. This group is tracked by Maltrail from vendor reporting but is not named in MITRE ATT&CK, so there is no curated profile to show.

domain45NETTRAVELER-domain.txt

Principal sources 2 reports

Ranked by how many of this actor's indicators each report brought in.

Timeline 45 indicators

Each entry is a batch of indicators that appeared upstream on one date, under the report it was filed with.

  1. 5 domain9 yrs ago

    proofpoint.com/us/threat-insight/post/nettraveler-apt-…

    info-spb.com
    interfaxru.com
    mogoogle.com
    riaru.net
    voennovosti.com

  2. 1 domain9 yrs ago

    proofpoint.com/us/threat-insight/post/nettraveler-apt-…

    tassnews.net

  3. 39 domain11 yrs ago

    securelist.com/blog/research/35936/nettraveler-is-runn…

    allen.w223.west263.cn
    andriodphone.net
    bauer.8866.org
    buynewes.com
    cultureacess.com
    discoverypeace.org
    drag2008.com
    eaglesey.com
    enterairment.net
    gami1.com
    globalmailru.com
    hint09.9966.org
    imapupdate.com
    inwpvpn.com
    keyboardhk.com
    localgroupnet.com
    mailyandexru.com
    msnnewes.com
    newesyahoo.com
    newfax.net
    pkspring.net
    ra1nru.com
    ramb1er.com
    sghrhd.190.20081.info
    southstock.net
    spit113.minidns.net
    tsgoogoo.net
    vip222idc.s169.288idc.com
    viplenta.com
    vipmailru.com
    viprainru.com
    viprambler.com
    vipyandex.com
    vpnwork.3322.org
    wolf0.3322.org
    wolf001.us109.eoidc.net
    yahooair.com
    yangdex.org
    zeroicelee.com

Further reading 2