Skip to Content
Cybercrime

GOLD PUMPKIN

ObjectivesFinancial Gain
AliasesHellCat

Summary

GOLD PUMPKIN is a financially motivated cybercrime group engaged in data‑theft and extortion. The group previously operated as ICA Group and rebranded as HELLCAT in late October 2024. Throughout these identities, the group ran a Tor‑based leak site used for posting stolen data. No activity attributed to GOLD PUMPKIN / ICA Group / HELLCAT has been observed since May 2025.
Threat Bottom Section BG

Contact us

Contact us directly whether your organization needs immediate assistance or
you want to discuss your incident readiness, response, and testing needs.

GOLD PUMPKIN | Threat Profile Detail | Sophos