Operation ShadowHammer
ID: 2a586f74-3be4-4771-90b9-1b4aa140357b
STIX ID: report--2a586f74-3be4-4771-90b9-1b4aa140357b
Threat Score
82/100
Uploaded: 2026-08-25
Published Date: 2019-03-26
Last Modified Date: 2019-03-26
Created by: dogesec
TLP:CLEAR
ADMIRALTY:B2
PAP:CLEAR
...
...
The report details Operation ShadowHammer, a 2018–2019 supply-chain attack that trojanized ASUS Live Update to install a backdoor on targeted machines, identified by MAC addresses, and signed with legitimate certificates; it includes IOCs and attribution hints linking to the ShadowPad/BARIUM ecosystem and notes widespread potential impact.