Nomadic Octopus
- ID
- G0133
- Associated names
- DustSquad
- Source
- attack.mitre.org
- MITRE last modified
- 1 Aug 2026
Nomadic Octopus is a Russian-speaking cyber espionage threat group that has primarily targeted Central Asia, including local governments, diplomatic missions, and individuals, since at least 2014. Nomadic Octopus has been observed conducting campaigns involving Android and Windows malware, mainly using the Delphi programming language, and building custom variants.[1][2][3]
Techniques used (7)
- T1036 Masquerading
- T1059.001 PowerShell
- T1059.003 Windows Command Shell
- T1105 Ingress Tool Transfer
- T1204.002 Malicious File
- T1564.003 Hidden Window
- T1566.001 Spearphishing Attachment