Skip to content
Install MCP

Threat actor

Glimmerglass

Last fetched

Glimmerglass is a threat actor tracked in WhisperGraph's MITRE ATT&CK corpus, observed using 0 techniques.

Description

Glimmerglass was a U.S.-based technology company that built optical networking products, including technology that facilitates the interception of undersea fiber-optic cables. Glimmerglass has reportedly provided systems capable of monitoring and analyzing internet traffic, including services like Facebook, Twitter and Gmail. Their technology included 3D MEMS (Micro-Electro-Mechanical Systems) solutions, which allow for the interception and duplication of light signals transmitted through fiber-optic cables. This enables agencies to capture the full content of communications, not just metadata, for intelligence purposes. The company has acknowledged that its systems are deployed in multiple countries for "lawful interception" under anti-terrorism laws. Its tools are marketed as providing intelligence agencies with full control over massive flows of data, including the ability to analyze communications in real time. Confidential materials from Glimmerglass have demonstrated its ability to map social networks, monitor webmail, and intercept phone calls. The company was re-named “VSocial Technologies” in 2021 and continues to operate under that brand.

Techniques by tactic

No ATT&CK techniques are recorded for Glimmerglass in WhisperGraph.

Attributed infrastructure

None published. WhisperGraph carries no ATTRIBUTED_TO edge to Glimmerglass today — this states the absence of a published link, not that Glimmerglass has no infrastructure.

References

© The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.

Related pages

Pivot from Glimmerglass into its techniques, tactics and any attributed infrastructure.

Queries

Resolves the slug to this actor, merging every duplicate node sharing the same name.


MATCH (a:ACTOR)
WHERE a.name =~ $pattern OR any(x IN a.aliases WHERE x =~ $pattern)
RETURN a.id AS id, a.name AS name, a.aliases AS aliases, a.description AS description,
       a.references AS references, a.campaigns AS campaigns
LIMIT 25
Run yourself →

Techniques this actor uses, grouped by the tactic each one serves.


MATCH (a:ACTOR {name: $name})-[:USES_TECHNIQUE]->(t:ATTACK_PATTERN)
OPTIONAL MATCH (t)-[:USES_TACTIC]->(tac:ATTACK_PATTERN)
RETURN t.id AS techniqueId, t.name AS techniqueName, tac.id AS tacticId, tac.name AS tacticName
LIMIT 1000
Run yourself →

Infrastructure publicly attributed to this actor.


MATCH (n)-[:ATTRIBUTED_TO]->(a:ACTOR {name: $name})
RETURN labels(n)[0] AS kind, n.name AS name
LIMIT 25
Run yourself →

Or query Whisper from your own LLM workflow via the Whisper MCP server.