103
Indicators
Properties
- Summary
- Also tracked as Morpho and Butterfly (Kaspersky and Symantec, July 2015). A well-resourced, apparently financially or espionage-motivated group that compromised Apple, Facebook, Twitter and Microsoft in 2013 through a Java zero-day watering hole on an iPhone developer forum, and in 2014-2015 hit law
- Summary source
- written 2026-10-25 from public vendor reporting (Citizen Lab 2015; Kaspersky/Symantec 2015; Kaspersky 2015; Mandiant 2020); not in ATT&CK
- In Signal since
- initial import (Sep 2026)
Explore this actor's full graph with Ninja Signal