Kimsuky: North Korean State-Sponsored Cyber Espionage Group
Kimsuky is a North Korean threat actor focused on intelligence gathering, particularly targeting cryptocurrency workers with fake job interview lures using ClickFix.
Category: Attack Groups
MITRE ATT&CK groups, threat actors, intrusion sets and activity clusters.
Kinsing: Cryptojacking Threat Group
Kinsing is a threat group known for cryptojacking operations, often deploying cryptocurrency miners on compromised systems. In this campaign, the Lambsys malware…
WatchDog: Cryptojacking Threat Group
WatchDog is a threat group involved in cryptojacking, deploying miners on vulnerable systems. The Lambsys malware actively terminates WatchDog processes to maintain…
Rocke: Cryptojacking Threat Group
Rocke is a threat group associated with cryptocurrency mining malware. The Lambsys malware kills Rocke miner processes as part of its anti-competition…
Outlaw: Cryptojacking Threat Group
Outlaw is a threat group known for cryptojacking activities. The Lambsys malware terminates Outlaw miner processes to eliminate rival operations.
Unknown threat actor — Attack group profile
Unknown threat actor was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news,…
Cl0p Ransomware Group
A ransomware group also known as Chubby Scorpius, FIN11, Graceful Spider, and Lace Tempest. Known for exploiting vulnerabilities in enterprise applications for…
North Korean threat actor — Attack group profile
North Korean threat actor was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber…
Mustang Panda Abuses Zoho WorkDrive as Command Channel in Indian Government Attacks
The China-aligned espionage group Mustang Panda is running two campaigns against Indian government and hydropower targets, deploying new malware and turning a…
Mustang Panda Uses Zoho WorkDrive as Command Channel in Indian Government Attacks
The Mustang Panda threat group has been observed using Zoho WorkDrive as a command and control channel in attacks targeting Indian government…