Skip to content
Nation-state APTEspionageIntermediate sophistication

Freakyshelly

Freakyshelly is a nation-state APT group with an espionage motive, tracked by Brandefense. It uses 3 MITRE ATT&CK techniques.

Techniques
3
Exploited CVEs
No CVE data
First seen
Sep 18, 2017
Last seen
Sep 18, 2017
Record updated

How They Operate · MITRE ATT&CK.

3 techniques across 2 of 14 tactics

Reconnaissance1

T1592.002
Gather Victim Host Information: Software

Resource Development·

Initial Access2

T1204.002
User Execution: Malicious File
T1566.001
Phishing: Spearphishing Attachment

Execution·

Persistence·

Privilege Escalation·

Defense Evasion·

Credential Access·

Discovery·

Lateral Movement·

Collection·

Command and Control·

Exfiltration·

Impact·

Campaigns.

  1. FreakyshellySep 2017

Indicators Of Compromise.

TLP:AMBER

1 indicator on the Brandefense platform

IP, domain and hash indicators · YARA rules · ATT&CK Navigator export

Request A Demo

About Freakyshelly.

A targeted threat actor or group conducting reconnaissance operations via spearphishing attachments to profile target environments prior to payload delivery.

Last updated Oct 19, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.