Filter by

Threat profiles

Explore the latest threat group definitions and profiles published by the

Sophos® Counter Threat Unit™ (CTU) Research Team.

Showing 101-110 of 197 profiles

Name	Location	Objectives	Aliases	Tools
GOLD FAIRFAX	Cybercrime	Financial Gain		Ramnit, Tinba
GOLD FEATHER	Cybercrime	Financial Gain, Ransomware	Water Galura (Trend Micro)	Qilin
GOLD FIESTA	Cybercrime	Financial Gain, Ransomware		Cobalt Strike, Cring, Hello, Mimikatz, PowerShell, Rapture, SMBExec
GOLD FLAME	Cybercrime	Data Theft, Extortion, Financial Gain, Ransomware	DragonForce	ADFind, AnyDesk, Cobalt Strike, FileSeek, Mimikatz, socks.exe, SoftPerfect Network Scanner, SystemBC
GOLD FLAMINGO	Cybercrime	Financial Gain, Ransomware	REF9019 (Elastic), Tropical Scorpius (Palo Alto Networks), UAC-0132 (CERT-UA), UAC0132 (CERT-UA), UNC2596 (Mandiant), Void Rabisu (Trend Micro)	Chanitor, Cobalt Strike, Cuba, Meterpreter, Mimikatz, ROMCOM RAT
GOLD FLANDERS	Cybercrime	Extortion, Financial Gain
GOLD FRANKLIN	Cybercrime	Data Theft, Financial Gain	FIN6 (FireEye), ITG08 (IBM), MageCart Group 6 (RiskIQ), Skeleton Spider (CrowdStrike), Storm-0538 (Microsoft), White Giant (PWC)	FrameWorkPOS, Metasploit, Meterpreter, Mimikatz, PowerSploit, PowerUpSQL, RemCom
GOLD GALLEON	Cybercrime	Business Email Compromise, Financial Gain		AgentTesla, HawkEye, Pony, Predator Pain
GOLD GARDEN	Cybercrime	Financial Gain, Ransomware		GandCrab
GOLD GILBERT	Cybercrime	Financial Gain	CTG-0419 (SCWX CTU)	DarkComet Trojan, NetWire Trojan

…

…