[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ffgFSQY4bjJ-70aSqwNVL2PDLSSAb1MF8rNLTJBoDgPI":3},{"success":4,"data":5},true,{"name":6,"slug":7,"aliases":8,"description":10,"country":11,"suspected_sponsor":12,"target_industries":13,"target_countries":14,"incident_types":15,"references":16,"techniques":20,"technique_count":21,"created_at":22,"seoMetadata":23,"schemaOrg":27},"Witchetty","witchetty",[9],"LookingFrog","Witchetty was first documented by ESET in April 2022, who concluded that it was one of three sub-groups of TA410, a broad cyber-espionage operation with some links to the Cicada group (aka APT10). Witchetty’s activity was characterized by the use of two pieces of malware, a first-stage backdoor known as X4 and a second-stage payload known as LookBack. ESET reported that the group had targeted governments, diplomatic missions, charities, and industrial\u002Fmanufacturing organizations.","CN",null,[],[],[],[17,18,19],"https:\u002F\u002Fwww.rewterz.com\u002Frewterz-news\u002Frewterz-threat-alert-witchetty-apt-group-active-iocs","https:\u002F\u002Fsymantec-enterprise-blogs.security.com\u002Fblogs\u002Fthreat-intelligence\u002Fwitchetty-steganography-espionage","https:\u002F\u002Fwww.welivesecurity.com\u002F2022\u002F04\u002F27\u002Flookback-ta410-umbrella-cyberespionage-ttps-activity\u002F",[],0,"2023-11-07T02:15:03.167786+00:00",{"title":24,"metaDescription":25,"keywords":26},"Witchetty Threat Actor Profile | EdgeProtect","Witchetty was first documented by ESET in April 2022, who concluded that it was one of three sub-groups of TA410, a broad cyber-espionage operation wi...","Witchetty, LookingFrog, threat actor, APT, cyber threat, threat intelligence, CN",{"@context":28,"@type":29,"name":6,"alternateName":30,"description":10,"url":31,"mainEntityOfPage":32,"location":34},"https:\u002F\u002Fschema.org","Organization",[9],"https:\u002F\u002Fdev.precursorintelligence.com\u002Fthreat-actors\u002Fwitchetty",{"@type":33,"@id":31},"WebPage",{"@type":35,"name":11},"Country"]