Filter by

Threat profiles

Explore the latest threat group definitions and profiles published by the

Sophos® Counter Threat Unit™ (CTU) Research Team.

Showing 91-100 of 197 profiles

Name	Location	Objectives	Aliases	Tools
GOLD DUPONT	Cybercrime	Financial Gain, Ransomware	Sprite Spider (CrowdStrike), Storm-2460 (Microsoft)	777, ArtifactExx, Cobalt Strike, Defray, Metasploit, PipeMagic, PyXie, Shifu, SystemBC, Vatet
GOLD EMBRACE	Cybercrime	Data Theft, Extortion, Financial Gain, Hack and Leak, Ransomware	Interlock	AnyDesk, BerserkStealer, Cobalt Strike, Hotta Killer, InterlockRAT, Lumma Stealer, MintLoader, NodeSnakeRAT, PuTTY, ScreenConnect, SystemBC, WinSCP
GOLD EMBRACE	Cybercrime	Data Theft, Extortion, Financial Gain, Hack and Leak, Ransomware	Interlock	AnyDesk, BerserkStealer, Cobalt Strike, Hotta Killer, InterlockRAT, Lumma Stealer, MintLoader, NodeSnakeRAT, PuTTY, ScreenConnect, SystemBC, WinSCP
GOLD ENCORE	Cybercrime	Financial Gain, Ransomware	Balloonfly (Symantec), Fiddling Scorpius (Palo Alto)	AdFind, Bloodhound, Cobalt Strike, GMER, Grixba, Mimikatz, Nekto, Play, Plink, PowerTool, Process Hacker, PsExec, SystemBC, Winpeas, WinRAR, WinSCP
GOLD ENCOUNTER	Cybercrime	Data Theft, Extortion, Financial Gain, Ransomware	PayoutsKing Group	AdaptixC2, Havoc C2, OpenSSH, PayoutsKING ransomware, QEMU, QuickAssist, Rclone, SuperOps, WebDAV hosting, WinSCP
GOLD EQUINOX	Cybercrime	Financial Gain, Ransomware		Phobos ransomware
GOLD ESPRESSO	Cybercrime	Financial Gain, Ransomware		AvosLocker
GOLD ESSEX	Cybercrime	Financial Gain, Spam Operations	Narwhal Spider (CrowdStrike), Storm-0302 (Microsoft), TA544 (Proofpoint)	Cutwail, Pony, Pushdo
GOLD EVERGREEN	Cybercrime	Botnet Operations, Financial Gain, Ransomware	The Business Club	CryptoLocker, JabberZeus, Pony, Zeus
GOLD FAIRFAX	Cybercrime	Financial Gain		Ramnit, Tinba

…

…