Equation_Group__2018__blog_equation-the-death-star.pdf

The Kaspersky 'Star of Malware Galaxy' blog post analyzes the Equation Group — a long‑running, highly sophisticated cyber‑espionage actor — documenting multiple implants (e.g., Fanny, EquationLaser, EquationDrug, GrayFish), use of zero‑day exploits and USB/air‑gap C2, and a rare HDD firmware reprogramming module (nls_933w.dll); the report provides MD5 hashes, C2 domains, hardcoded IPs, YARA rules and detection names to support incident response and detection.