The Gentlemen — Attack group profile
The Gentlemen was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs,…
Category: Attack Groups
MITRE ATT&CK groups, threat actors, intrusion sets and activity clusters.
Qilin Ransomware Affiliate Program
Qilin is a ransomware operation that DevMan initially affiliated with before launching its own RaaS. The group is known for its ransomware-as-a-service…
MedusaLocker — Attack group profile
MedusaLocker was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
DragonForce — Attack group profile
DragonForce was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
LapDogs: Router ORB Attack Group Similar to AryStinger
LapDogs is an attack group tracked by Mandiant that operates operational relay box networks (ORBs) using compromised end-of-life routers and IoT devices.…
APT28 (Fancy Bear / Forest Blizzard)
Russian GRU-linked group whose tradecraft overlaps with CaptiveCrunch, but attribution was not made due to lack of direct technical linkage.
Volt Typhoon: China-Nexus Threat Actor Using JDY Botnet
Volt Typhoon is a Chinese state-sponsored hacking group that has been observed using the JDY botnet for reconnaissance and targeting of vulnerable…
GrayBravo: Threat Activity Cluster Behind CastleLoader and CastleStealer
GrayBravo is a threat activity cluster attributed to distributing CastleLoader and CastleStealer malware. The group is known for using ClickFix-style lures and…
PolinRider: Threat Cluster Using Blockchain-Based C2
PolinRider is a threat cluster assessed to be related to the Contagious Interview campaign, known for using multi-blockchain resolver structures (Tron, Aptos,…
Russian-Speaking IAB Behind FortiBleed Credential Harvesting Campaign
A financially motivated Russian-speaking initial access broker (IAB) is assessed to be behind the FortiBleed campaign, which has targeted over 430,000 FortiGate…