Cybercrime Groups 77 articles

Summary Snatch Ransomware Group is a cybercriminal organization known for deploying ransomware attacks primarily targeting businesses and organizations worldwide. The group employs sophisticated encryption techniques to lock victims' data and…

Summary TA505 is a prolific cybercriminal group known for conducting large-scale, financially motivated cyberattacks primarily targeting organizations worldwide. The group is associated with distributing a variety of malware families, including…

Summary TA542 is a prolific cybercriminal threat group known for conducting large-scale email-based malware campaigns. The group primarily targets organizations worldwide using sophisticated phishing techniques to distribute various types of…

Summary TA551 is a prolific cybercriminal group known for conducting large-scale email-based malware campaigns primarily targeting financial institutions and enterprises worldwide. The group is associated with distributing various types of…

Summary TA570 is a financially motivated cybercrime group known for distributing malware primarily through email campaigns. The group employs sophisticated phishing techniques and malicious attachments to deliver various types of…

Summary TA577 is a prolific cybercrime threat actor group known for conducting large-scale email-based malware campaigns primarily targeting financial institutions, government entities, and enterprises worldwide. The group is recognized for…

Summary TA578 is a financially motivated threat actor group known for conducting large-scale phishing campaigns and distributing malware, primarily targeting organizations through email-based application attacks. The group frequently uses malicious…

Summary UNC1878 is a financially motivated cyber threat group known for conducting sophisticated application-layer attacks targeting organizations primarily in the financial and retail sectors. The group employs advanced malware and…

Summary UNC2447 is a financially motivated cyber threat group known for deploying the ShadowPad backdoor to conduct targeted attacks primarily against organizations in the telecommunications, government, and technology sectors. The…

Summary UNC2465 is a threat actor group identified by cybersecurity researchers, known for conducting sophisticated application-layer attacks targeting various industries. The group employs advanced techniques to exploit vulnerabilities in web…

Summary UNC2596 is a cyber threat group known for conducting sophisticated application attacks, primarily targeting enterprise environments to gain unauthorized access and exfiltrate sensitive data. The group employs advanced techniques…

Summary UNC2630 is a cyber threat group known for conducting sophisticated application attacks targeting various industries. The group employs advanced techniques to exploit vulnerabilities in web applications and software platforms,…

Summary UNC2659 is a cyber threat group identified for conducting sophisticated application attacks, primarily targeting enterprise environments to gain unauthorized access and exfiltrate sensitive data. The group is known for…

Summary UNC3944 is a threat actor group known for conducting sophisticated application attacks targeting enterprise environments. The group employs advanced techniques to exploit vulnerabilities in web applications and software platforms,…

Summary UniCC Marketplace Operators are individuals or groups managing an online platform that facilitates the sale and distribution of stolen credit card data and related financial information. These marketplaces operate…

Summary Vice Society is a ransomware group known for targeting educational institutions, healthcare organizations, and government entities primarily in North America and Europe. The group employs double extortion tactics, combining…

Summary Wizard Spider is a sophisticated cybercriminal group known for conducting highly targeted application attacks, primarily focusing on ransomware deployment and financial theft. The group is recognized for its use…