Description
OceanMap is a backdoor associated with the APT28 intrusion set, whose campaigns against government organizations in Europe and the Caucasus have used compromised routers as malicious infrastructure. Researchers have analyzed its command and control server artifacts in detail, and French authorities reported its use in targeting French entities.
Stats
- First seen
- March 2022
- Last seen
- October 2026
Also known as
Oceanmap
Alert name variants
| Alert Name |
|---|
| ByteCode-MSIL.Backdoor.Oceanmap |
| ByteCode-MSIL.Backdoor.OceanMap |
| ByteCode-MSIL.Trojan.OceanMap |