SantaAd: Russian-Speaking Account Advertising Fortinet Device Access
A Russian-speaking account named SantaAd advertised access to thousands of Fortinet devices for a starting price of $30,000, later increased to $60,000.…
Category: Attack Groups
MITRE ATT&CK groups, threat actors, intrusion sets and activity clusters.
FortiBleed: 110 Million Credentials Harvested via FortiGate Firewalls in Global Campaign
A Russian-speaking initial access broker (IAB) has been linked to a large-scale credential-harvesting operation dubbed FortiBleed, targeting over 430,000 FortiGate firewalls globally…
Prince Group: Transnational Criminal Organization in Southeast Asian Scam Compounds
Prince Group is a Cambodia-based conglomerate classified as a Transnational Criminal Organization (TCO) by the U.S. Treasury for its role in operating…
HuiOne Group: Enabler of Cyber Scam Money Laundering
HuiOne Group is a Cambodia-based conglomerate whose subsidiaries operated an illicit Telegram marketplace, HuiOne Guarantee, facilitating money laundering for cryptocurrency investment fraud…
plymouth: Threat Actor Behind StealC Infostealer
plymouth is the threat actor who sells the StealC information stealer under a malware-as-a-service model, charging $300 per month or $1,000 for…
YouTubeTA: StealC Affiliate Distributing Malware via YouTube
YouTubeTA is a customer of the StealC MaaS operation who used Google's YouTube platform to distribute the stealer by advertising cracked versions…
InCrease: Threat Actor Behind Amadey Malware-as-a-Service
InCrease is the threat actor who advertises and sells the Amadey malware loader under a malware-as-a-service model. The actor charges $600 for…