NativeZone (a814fd1d-8c2c-41b3-bb3a-30c4318c74c0)
NativeZone is the name given collectively to disposable custom Cobalt Strike loaders used by APT29 since at least 2021.[MSTIC Nobelium Toolset May 2021][SentinelOne NobleBaron June 2021]
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| APT29 (4c3e48b9-4426-4271-a7af-c3dfad79f447) | Tidal Groups | NativeZone (a814fd1d-8c2c-41b3-bb3a-30c4318c74c0) | Tidal Software | 1 |