group

NEODYMIUM G0055

Created: 16 January 2018
Last modified: 31 July 2026
Alias: NEODYMIUM

NEODYMIUM is an activity group that conducted a campaign in May 2016 and has heavily targeted Turkish victims. The group has demonstrated similarity to another activity group called PROMETHIUM due to overlapping victim and campaign characteristics. [1] [2] NEODYMIUM is reportedly associated closely with BlackOasis operations, but evidence that the group names are aliases has not been identified. [3]

TechniquesNone recorded

TacticsNone recorded

Tool or malwareBottom 23%

CampaignsNone recorded

Enterprise ATT&CK only. Any Mobile or ICS rows on the same ATT&CK page are not carried.

group

NEODYMIUM G0055

Created: 16 January 2018
Last modified: 31 July 2026
Alias: NEODYMIUM

TechniquesNone recorded

TacticsNone recorded

Tool or malwareBottom 23%

CampaignsNone recorded

Enterprise ATT&CK only. Any Mobile or ICS rows on the same ATT&CK page are not carried.

NEODYMIUM MITRE reference G0055

Wingbird S0176 ↗

4 5

malware9 techniques

Standing G0055

Reach is how much of ATT&CK this group touches. Coverage is how well defended each thing it does is, as a median per technique rather than a total — a total would just restate the reach. Each figure is ranked against all 176 ATT&CK groups . Where most of the population shares one value, a percentile would rank the tie instead of the entity, so the raw value is shown and no rank is claimed.

NEODYMIUM G0055

NEODYMIUM G0055

NEODYMIUM MITRE reference G0055

Standing G0055

NEODYMIUM MITRE reference G0055

Standing G0055

Reach

Coverage

NEODYMIUM detections G0055

NEODYMIUM detections G0055