Threat actor
Equus Technologies
Last fetched
Equus Technologies is a threat actor tracked in WhisperGraph's MITRE ATT&CK corpus, observed using 0 techniques.
Description
Equus Technologies is an Israeli company behind an advanced spyware, known as "Lipizzan," designed to steal users' data. The company offers custom solutions for law enforcement, intelligence agencies, and national security organizations. According to Google researchers, Lipizzan is a multi-stage spyware capable of monitoring and extracting a user’s emails, SMS messages, location data, voice calls, and media files. Google identified 20 Lipizzan apps, which were distributed in a highly targeted manner to fewer than 100 devices. In response, Google has blocked both the developers and the apps from the Android ecosystem. Besides malware, the source reported that Equus Technologies also offers app and cloud interception technology packaged as portable devices. These devices, which can be carried in backpacks, are designed to connect to nearby cellphones and steal passwords along with other sensitive personal data. At least one employee of Equus Technologies is a former staff member of NSO Group, the notorious Israeli malware vendor. After their exposure in numerous reports in 2017, the company rebranded its name to Merlinx.
Techniques by tactic
No ATT&CK techniques are recorded for Equus Technologies in WhisperGraph.
Attributed infrastructure
None published. WhisperGraph carries no ATTRIBUTED_TO edge to Equus Technologies today — this states the absence of a published link, not that Equus Technologies has no infrastructure.
References
- https://www.vice.com/en/2017/07/27/google-revealed-an-israeli-spyware-company-that-has-quietly-sold-its-wares-for-years/
- https://www.forbes.com/sites/thomasbrewster/2017/07/26/google-kills-pro-android-surveillance-malware/#d4251b42e3df
- https://android-developers.googleblog.com/2017/07/from-chrysaor-to-lipizzan-blocking-new.html?m=1
- https://www.wired.com/story/lipizzan-android-malware-nation-state/
- https://thehackernews.com/2017/07/lipizzan-android-spyware.html
- https://finder.startupnationcentral.org/company_page/equus-technologies
© The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.
Related pages
Pivot from Equus Technologies into its techniques, tactics and any attributed infrastructure.
Queries
Resolves the slug to this actor, merging every duplicate node sharing the same name.
MATCH (a:ACTOR)
WHERE a.name =~ $pattern OR any(x IN a.aliases WHERE x =~ $pattern)
RETURN a.id AS id, a.name AS name, a.aliases AS aliases, a.description AS description,
a.references AS references, a.campaigns AS campaigns
LIMIT 25Techniques this actor uses, grouped by the tactic each one serves.
MATCH (a:ACTOR {name: $name})-[:USES_TECHNIQUE]->(t:ATTACK_PATTERN)
OPTIONAL MATCH (t)-[:USES_TACTIC]->(tac:ATTACK_PATTERN)
RETURN t.id AS techniqueId, t.name AS techniqueName, tac.id AS tacticId, tac.name AS tacticName
LIMIT 1000Infrastructure publicly attributed to this actor.
MATCH (n)-[:ATTRIBUTED_TO]->(a:ACTOR {name: $name})
RETURN labels(n)[0] AS kind, n.name AS name
LIMIT 25Or query Whisper from your own LLM workflow via the Whisper MCP server.