{"id":1941,"date":"2023-04-14T00:12:44","date_gmt":"2023-04-13T21:12:44","guid":{"rendered":"https:\/\/informnapalm.org\/az\/?p=1941"},"modified":"2023-04-14T18:30:13","modified_gmt":"2023-04-14T15:30:13","slug":"apt-28","status":"publish","type":"post","link":"https:\/\/informnapalm.org\/az\/apt-28\/","title":{"rendered":"APT 28 haker qrupunun lideri v\u0259 FTB t\u0259r\u0259find\u0259n axtar\u0131lan GRU zabitinin s\u0131nd\u0131r\u0131lmas\u0131"},"content":{"rendered":"
\n

Cyber Resistance<\/span><\/a> qrupunun ukraynal\u0131 haktivistl\u0259ri GRU-nun zabiti polkovnik-leytenant Sergey Aleksandrovi\u00e7 Morga\u00e7evin elektron po\u00e7tlar\u0131n\u0131 s\u0131nd\u0131raraq material\u0131 ekskl\u00fcziv olaraq t\u0259hlil \u00fc\u00e7\u00fcn \u0130nformNapalm-a<\/span><\/a> veribl\u0259r.<\/strong><\/p>\n<\/div>\n

\n

Morqa\u00e7ev Rusiya Ba\u015f Q\u0259rargah\u0131n\u0131n K\u0259\u015ffiyyat \u0130dar\u0259sinin zabiti, GRU-nun 85-ci X\u00fcsusi M\u0259rk\u0259zinin 26165-ci b\u00f6lm\u0259sinin zabitl\u0259rind\u0259n ibar\u0259t APT 28 rus haker qrupunun r\u0259hb\u0259ridir.<\/p>\n

GRU zabiti Morqa\u00e7ev v\u0259 haker qrupu APT 28<\/strong><\/h2>\n

Bu m\u0259qal\u0259d\u0259 InformNapalm FTB t\u0259r\u0259find\u0259n axtar\u0131lan<\/a><\/strong> bu rus GRU zabiti haqq\u0131nda b\u00fct\u00fcn m\u00fcvafiq \u015f\u0259xsi m\u0259lumatlar\u0131 a\u00e7\u0131qlay\u0131r. Bu rus haker qrupunun liderinin \u00f6z\u00fcn\u00fcn ukraynal\u0131 hakerl\u0259r t\u0259r\u0259find\u0259n nec\u0259 s\u0131nd\u0131r\u0131ld\u0131\u011f\u0131n\u0131 t\u0259svir etm\u0259kl\u0259 bu m\u0259qal\u0259ni bitir\u0259c\u0259yik. \u015e\u0259xsi yaz\u0131\u015fmalar\u0131n\u0131 pozduqdan v\u0259 AliExpress sifari\u015fini d\u0259yi\u015fdirdikd\u0259n sonra onlar simvolik deqradasiya akt\u0131 t\u00f6r\u0259dibl\u0259r.<\/p>\n

Fancy Bear, Pawn Storm kimi d\u0259 tan\u0131nan APT 28 Rusiyan\u0131n \u0259n m\u0259\u015fhur haker qruplar\u0131ndan biridir. Qrup d\u00fcnya \u00fczr\u0259 \u00e7oxsayl\u0131 kibercinay\u0259tl\u0259rd\u0259 ittiham olunur. Bu struktur birba\u015fa Rusiya h\u0259rbi k\u0259\u015ffiyyat xidm\u0259tin\u0259 tabedir. Qrup AB\u015e, Almaniya, \u0130taliya, Latviya, Estoniya, \u00c7exiya, Pol\u015fa, Norve\u00e7, Hollandiya, Ukrayna v\u0259 dig\u0259r \u00f6lk\u0259l\u0259rd\u0259 d\u00f6vl\u0259t v\u0259 qeyri-d\u00f6vl\u0259t obyektl\u0259rin\u0259 \u00e7oxsayl\u0131 kiberh\u00fccumlar h\u0259yata ke\u00e7irib.<\/p>\n

FTB t\u0259r\u0259find\u0259n axtar\u0131l\u0131r<\/strong><\/h2>\n

2018-ci ilin iyulunda AB\u015e \u018fdliyy\u0259 Departamenti Demokratlar Partiyas\u0131n\u0131n Milli Komit\u0259sinin serverl\u0259rin\u0259 haker h\u00fccumu v\u0259 AB\u015e se\u00e7kil\u0259rin\u0259 m\u00fcdaxil\u0259 c\u0259hdi il\u0259 ba\u011fl\u0131 12 GRU \u0259m\u0259kda\u015f\u0131na qar\u015f\u0131 r\u0259smi ittiham ir\u0259li s\u00fcr\u00fcb. 26165 v\u0259 74455 sayl\u0131 h\u0259rbi hiss\u0259l\u0259rd\u0259 xidm\u0259t ed\u0259n GRU \u015f\u0259xsi hey\u0259tinin d\u0259 struktura daxil oldu\u011fu m\u00fc\u0259yy\u0259n edilib. T\u0259qsirl\u0259ndiril\u0259n 12 n\u0259f\u0259r aras\u0131nda GRU zabiti Sergey Morqa\u00e7ev d\u0259 var.<\/p>\n

\"FTB<\/a>Morqa\u00e7evin elektron po\u00e7t qutusunda Apple-dan bir mesaj tap\u0131ld\u0131: mors@mail.ru. 2018-ci il mesaj\u0131nda FTB-nin cinay\u0259tl\u0259 ba\u011fl\u0131 onun hesab m\u0259lumatlar\u0131n\u0131<\/a><\/strong> t\u0259l\u0259b etdiyi bildirilir.<\/p>\n

\"GRU<\/a>Haktivistl\u0259r Morqa\u00e7evin elektron m\u0259ktublar\u0131ndan bir \u00e7ox maraql\u0131 detallar toplay\u0131blar. H\u0259m \u015f\u0259xsi h\u0259yat\u0131, h\u0259m d\u0259 2023-c\u00fc ild\u0259 haz\u0131rk\u0131 ya\u015fay\u0131\u015f yeri v\u0259 i\u015fi haqq\u0131nda.<\/p>\n

M\u0259lumatlar\u0131n pozulmas\u0131 h\u0259m\u00e7inin Morqa\u00e7evin \u015f\u0259xsi s\u0259n\u0259dl\u0259rin\u0259 v\u0259 onunla \u0259laq\u0259li \u015f\u0259xsl\u0259rin m\u0259lumatlar\u0131na \u00e7\u0131x\u0131\u015f \u0259ld\u0259 etm\u0259y\u0259 imkan verib.<\/p>\n

\"Sergey<\/a>Sergey Aleksandrovi\u00e7 Morqa\u00e7ev 22 may 1977-ci ild\u0259 Ukraynan\u0131n Kiyev \u015f\u0259h\u0259rind\u0259 anadan olub. 1994-1999-cu ill\u0259rd\u0259 Moskvada FSB Akademiyas\u0131nda t\u0259hsil al\u0131b. 1999-2022-ci ill\u0259rd\u0259 26165 h\u0259rbi hiss\u0259d\u0259 xidm\u0259t edib.<\/p>\n

Morqa\u00e7ev Rusiya v\u0259t\u0259nda\u015f\u0131d\u0131r v\u0259 12 iyul 2022-ci ild\u0259 Moskva vilay\u0259tinin Rusiya Daxili \u0130\u015fl\u0259r Nazirliyi t\u0259r\u0259find\u0259n verilmi\u015f 4622 608349 n\u00f6mr\u0259li pasportun sahibidir. O, Moskva vilay\u0259ti, Korolev \u015f\u0259h\u0259ri, Prospekt Dekabristov, bina 6\/8, m\u0259nzil 249-da qeydiyyatdad\u0131r.<\/p>\n

\"FTB<\/a>\"GRU<\/a>Sergey Morqa\u00e7evin P778CB750 d\u00f6vl\u0259t n\u00f6mr\u0259 ni\u015fanl\u0131 Toyota RAV4 markal\u0131 avtomobili var. Onun 9902 449278 n\u00f6mr\u0259li s\u00fcr\u00fcc\u00fcl\u00fck v\u0259siq\u0259si var.<\/p>\n

\"GRU<\/a>\"P778CB750<\/a><\/p>\n

M\u0259nzil\u0259 m\u00fclkiyy\u0259t s\u0259n\u0259di<\/strong><\/h2>\n

29 iyun 2020-ci il tarixli mesajdan Morqa\u00e7evin haz\u0131rk\u0131 ya\u015fay\u0131\u015f yeri d\u0259 t\u0259sdiql\u0259nib (PDF<\/a><\/strong>).<\/p>\n

\"M\u0259nzil\u0259<\/a><\/p>\n

Kadr s\u0259n\u0259dl\u0259ri<\/strong><\/h2>\n

Morqa\u00e7evin po\u00e7tundan tap\u0131lan “forma-4″\u00fcn\u00fcn skan edilmi\u015f sur\u0259tin\u0259 \u0259sas\u0259n (d\u00f6vl\u0259t sirri il\u0259 tan\u0131\u015fl\u0131\u011f\u0131 qiym\u0259tl\u0259ndirm\u0259k \u00fc\u00e7\u00fcn doldurulur) o, 1999-cu ilin avqustundan 2022-ci ilin avqustunad\u0259k yuxar\u0131da ad\u0131 \u00e7\u0259kil\u0259n 26165 sayl\u0131 h\u0259rbi hiss\u0259d\u0259 xidm\u0259t edib. Daha sonra 26165 sayl\u0131 h\u0259rbi hiss\u0259d\u0259 b\u00f6lm\u0259 r\u0259isinin m\u00fcavini olub. 2022-ci ilin avqust ay\u0131ndan \u00d6z\u0259l Texnologiya M\u0259rk\u0259zind\u0259 \u201cbirinci kateqoriya proqramla\u015fd\u0131rma m\u00fch\u0259ndisi\u201d v\u0259zif\u0259sind\u0259 \u00e7al\u0131\u015f\u0131r. “Forma-4” h\u0259m\u00e7inin cari biznesin faktiki \u00fcnvan\u0131n\u0131 g\u00f6st\u0259rir: Ul. Gjatskaya 21\/53, Sankt-Peterburq, Rusiya.<\/p>\n

\"Kadr<\/a>X\u00fcsusi Texnologiya M\u0259rk\u0259zi (arxiv<\/a><\/strong>) Rusiyan\u0131n Ukraynaya qar\u015f\u0131 m\u00fcharib\u0259sinin t\u0259min edilm\u0259sind\u0259 m\u00fch\u00fcm rol oynay\u0131r. Ukrayna Milli Antikorrupsiya Agentliyinin r\u0259smi sayt\u0131n\u0131n<\/a><\/strong> m\u0259lumat\u0131na g\u00f6r\u0259, art\u0131q AB\u015e, B\u00f6y\u00fck Britaniya, Kanada, \u0130sve\u00e7r\u0259, Yaponiya, A\u0130 \u00f6lk\u0259l\u0259ri v\u0259 Ukrayna t\u0259r\u0259find\u0259n bu quruma qar\u015f\u0131 sanksiyalar t\u0259tbiq edilib. Morqa\u00e7evin \u015firk\u0259td\u0259 xidm\u0259t etdiyi kadrlar \u015f\u00f6b\u0259si il\u0259 yaz\u0131\u015fmalarla da t\u0259sdiql\u0259nib.<\/p>\n

\"GRU<\/a>\"GRU<\/a><\/p>\n

\u018fld\u0259 edil\u0259n s\u0259n\u0259dl\u0259r aras\u0131nda d\u00f6vl\u0259t sirri il\u0259 i\u015fl\u0259m\u0259k \u00fc\u00e7\u00fcn t\u0259hl\u00fck\u0259sizlik r\u0259smil\u0259\u015fdirilm\u0259si \u00fc\u00e7\u00fcn t\u0259l\u0259b olunan 13 dekabr 2022-ci il tarixli yeni tibbi aray\u0131\u015f d\u0259 var.<\/p>\n

\"GRU<\/a>S\u0259n\u0259dd\u0259 onun Rusiya M\u00fcdafi\u0259 Nazirliyind\u0259 xidm\u0259t ed\u0259rk\u0259n yeri v\u0259 f\u0259aliyy\u0259tinin t\u0259f\u0259rr\u00fcatlar\u0131, h\u0259m\u00e7inin Morqa\u00e7evin yeni n\u00f6vb\u0259t\u00e7ilik m\u0259nt\u0259q\u0259sind\u0259 almaq ist\u0259diyi maa\u015f bar\u0259d\u0259 m\u0259lumatlar da var.<\/p>\n

Sergey Morqa\u00e7evin CV-si<\/strong><\/h2>\n

Morqa\u00e7evin CV-si 5 avqust 2022-ci ild\u0259, yeni i\u015f\u0259 ke\u00e7m\u0259zd\u0259n \u0259vv\u0259l t\u0259rtib edilib. Onun t\u0259rc\u00fcmeyi-hal\u0131nda qeyd olunur ki, o, 1999-cu ild\u0259n h\u0259rbi hiss\u0259d\u0259 proqram t\u0259minat\u0131n\u0131n haz\u0131rlanmas\u0131 x\u00fcsusi \u015f\u00f6b\u0259sinin r\u0259isidir. Onun v\u0259zif\u0259l\u0259rin\u0259 kadrlar\u0131n i\u015f\u0259 g\u00f6t\u00fcr\u00fclm\u0259si v\u0259 \u015f\u00f6b\u0259nin i\u015fin\u0259 n\u0259zar\u0259t, tap\u015f\u0131r\u0131qlar\u0131n b\u00f6l\u00fc\u015fd\u00fcr\u00fclm\u0259si v\u0259 dig\u0259r b\u00f6lm\u0259l\u0259rl\u0259 \u0259m\u0259kda\u015fl\u0131q daxildir. CV dolay\u0131 yolla bu GRU zabitinin bir qrup h\u0259rbi GRU hakerin\u0259 r\u0259hb\u0259rlik etdiyini t\u0259sdiql\u0259yir. Maraql\u0131d\u0131r ki, o, \u00f6z t\u0259rc\u00fcmeyi-hal\u0131nda k\u00f6\u00e7m\u0259y\u0259 haz\u0131r olmad\u0131\u011f\u0131n\u0131, lakin tez-tez olmasa, i\u015fg\u00fczar s\u0259f\u0259rl\u0259r\u0259 getm\u0259y\u0259 haz\u0131r olaca\u011f\u0131n\u0131 bildirmi\u015fdi.<\/p>\n

\"Sergey<\/a>\u018fm\u0259k haqq\u0131 spesifikasiyas\u0131na g\u00f6r\u0259, Morqa\u00e7evin 2022-ci ilin sonunda ayl\u0131q \u0259m\u0259k haqq\u0131 250-300 min rubl aras\u0131nda olub.<\/p>\n

\"Sergey<\/a><\/p>\n

Rusiya D\u00f6vl\u0259t Xidm\u0259tinin portal\u0131nda s\u0131nd\u0131r\u0131l\u0131b<\/strong><\/h2>\n

Haktivistl\u0259r Morqa\u00e7evin Rusiya d\u00f6vl\u0259t xidm\u0259ti portal\u0131ndak\u0131 \u015f\u0259xsi hesab\u0131na daxil olub v\u0259 \u0259vv\u0259lki s\u0259n\u0259dl\u0259rin skan edilmi\u015f m\u0259lumatlar\u0131, habel\u0259 onun haz\u0131rk\u0131 v\u0259zif\u0259si v\u0259 ya\u015fay\u0131\u015f \u00fcnvan\u0131n\u0131 yoxlay\u0131blar.<\/p>\n

\"Rusiya<\/a>\"Rusiya<\/a>\"Rusiya<\/a>\"Rusiya<\/a>\"Rusiya<\/a>Sergey Morqa\u00e7ev 22 iyul 1988-ci ild\u0259n Yekaterina Viktorovna Morqa\u00e7eva il\u0259 ail\u0259lidir. C\u00fctl\u00fcy\u00fcn iki azya\u015fl\u0131 \u00f6vlad\u0131 var.<\/p>\n

\"Yekaterina<\/a>Fotoda Yekaterina Morqa\u00e7eva v\u0259 Sergey Morqa\u00e7ev yer al\u0131b.<\/p>\n

\u00dcmumiyy\u0259tl\u0259, Morqa\u00e7evin yaz\u0131\u015fmalar\u0131nda \u00e7oxlu maraql\u0131 v\u0259 r\u0259ngar\u0259ng m\u0259lumatlar var – h\u0259mkarlar\u0131 il\u0259 bayram v\u0259 ad g\u00fcnl\u0259rinin fotolar\u0131ndan tutmu\u015f texniki s\u0259n\u0259dl\u0259r\u0259 q\u0259d\u0259r.<\/p>\n

Cobalt Strike 4.0<\/strong><\/h2>\n

Morqa\u00e7evin elektron m\u0259ktublar\u0131nda tap\u0131lan nisb\u0259t\u0259n yeni texniki s\u0259n\u0259dl\u0259r\u0259 hakerl\u0259rin kiberh\u00fccumlar \u00fc\u00e7\u00fcn istifad\u0259 etdiyi platforma olan Cobalt Strike \u00fc\u00e7\u00fcn yamaq qeydl\u0259ri olan fayllar daxildir:<\/p>\n