Animal Farm is a threat actor alias referenced in the provided content as being synonymous with the cryptonym SNOWGLOBE. The content states that SNOWGLOBE is another name for Animal Farm and that it includes the well-known Babar malware family. No additional high-confidence details about targeting, tactics, techniques, or attribution are directly provided in the content beyond this alias relationship and association with Babar. Known aliases mentioned in the content: SNOWGLOBE.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
21 distinct techniques observed across reporting, grouped by tactic. Hover any cell for the evidence excerpt; click through for MITRE's full description.
2 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Referenced as the actor behind the SNOWGLOBE cryptonym and associated with the Babar malware family.
Referenced as the actor behind the SNOWGLOBE cryptonym and associated with the Babar malware family.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.