Skip to Content

Threat profiles

Explore the latest threat group definitions and profiles published by the 

Sophos® Counter Threat Unit™ (CTU) Research Team.

Showing 111-120 of 181 profiles
NameLocationObjectivesAliasesTools
Cybercrime
Financial Gain, Malware Distribution Services
RIG Exploit Kit
Cybercrime
Financial Gain
Anunak, Carbanak, Carbon Spider (CrowdStrike), FIN7 (FireEye), Silicon (Symantec)
Carbanak
Cybercrime
Financial Gain, Ransomware
BlackByte, Hecamede (Symantec)
BlackByte, Cobalt Strike, ExByte, MEGA, RDP, SoftPerfect Network Scanner
Cybercrime
Financial Gain, Ransomware
Lorenz, SMBExec
Cybercrime
Financial Gain, Ransomware
Boss Spider (CrowdStrike), CTG-0007 (SCWX CTU)
Samas
Cybercrime
Financial Gain, Ransomware
AdFind, Cobalt Strike, MegaSync, Mimikatz, Nefilim, Nemty
Cybercrime
Data Theft, Extortion, Hack and Leak, Ransomware
DevMan
Cybercrime
Financial Gain, Ransomware
Cobalt Strike, FileZilla, Hive, Mimikatz, Netscan, NTDSUtil, PCHunter64, PowerSploit, RDP, SystemBC
Cybercrime
Financial Gain
PROPHET SPIDER, UNC961
7-Zip, 7-ZIP, AUDITUNNEL, BURP Suite, GOTROJ, JSP webshells, Mimikatz, Wget
Cybercrime
Financial Gain, Ransomware
LockBit, StealBit