Threat Actor

NEODYMIUM

Also known as: NEODYMIUM

NEODYMIUM is an activity group that conducted a campaign in May 2016 and has heavily targeted Turkish victims. The group has demonstrated similarity to another activity group called PROMETHIUM due to overlapping victim and campaign characteristics. NEODYMIUM is reportedly associated closely with BlackOasis operations, but evidence that the group names are aliases has not been identified.

1
Software
0
indicators on this record

Properties

Last source
MITRE ATT&CK
STIX ID
intrusion-set--025bdaa9-897d-4bad-afa6-013ba5734653
In Signal since
initial import (Sep 2026)
Retrieved at
2026-11-01T16:36:57+00:00
Type
intrusion-set

Software & Tools (1)

▸
Wingbird [malware]

Wingbird is a backdoor that appears to be a version of commercial software [FinFisher](https://attack.mitre

Explore this actor's full graph with Ninja Signal

NEODYMIUM — Threat Actor Profile — Ninja Signal | Ninja Signal