Equation_Group__2015__Equation_group_questions_and_answers.pdf

This Kaspersky Lab report documents the Equation Group — a nation‑level APT — describing multiple espionage platforms (DoubleFantasy, EquationDrug, GrayFish, Fanny, TripleFantasy), their highly sophisticated techniques (bootkit/VBR infection, registry-based virtual file system, HDD firmware reprogramming, use of zero‑day exploits), global victim distribution across 30+ countries, and actionable indicators (MD5s, C2 domains/IPs, YARA rules) to support detection and mitigation.