Kaspersky Links Head Mare and Twelve Threat Groups in Joint Russian Attacks

Two threat groups known by the code names Head Mare and Twelve have likely joined forces to target Russian entities, according to new findings from Kaspersky. Head Mare has heavily utilized tools previously associated with Twelve. Additionally, Head Mare's attacks have used command and control (C2) servers exclusively linked to Twelve before these incidents. This suggests a collaboration between the two groups.