Skip to Content

Threat profiles

Explore the latest threat group definitions and profiles published by the 

Sophos® Counter Threat Unit™ (CTU) Research Team.

Showing 111-120 of 197 profiles
NameLocationObjectivesAliasesTools
Cybercrime
Financial Gain
Octo Tempest (Microsoft), Roasted 0ktapus (Group-IB), Scatter Swine (Okta), Scattered Spider (Crowdstrike), UNC3944 (Mandiant)
AnyDesk, ConnectWise Control, Logmein
Cybercrime
Financial Gain
Octo Tempest (Microsoft), Roasted 0ktapus (Group-IB), Scatter Swine (Okta), Scattered Spider (Crowdstrike), UNC3944 (Mandiant)
AnyDesk, ConnectWise Control, Logmein
Cybercrime
Financial Gain, Ransomware
Hive
Cybercrime
Financial Gain, Ransomware
Advanced IP Scanner, Cobalt Strike, Free Files Sync, LockBit, REvil
Cybercrime
Extortion, Financial Gain
Water Bakunawa (Trend Micro)
RansomHub
Cybercrime
Data Theft, Financial Gain
CTG-6969 (SCWX CTU), FIN8 (FireEye)
Gozi ISFB, Powersniff
Cybercrime
Financial Gain, Ransomware
INC Ransomware, MegaSync, Metasploit, PSexec
Cybercrime
Financial Gain
Cobalt Gang (Group-IB), Cobalt Spider (CrowdStrike)
ATMSpitter, Buhtrap, Carbanak, Cobalt Strike, CobtInt, Cyst, Metasploit, Meterpreter, Mimikatz, SpicyOmelette
Cybercrime
Financial Gain
Cobalt Gang (Group-IB), Cobalt Spider (CrowdStrike)
ATMSpitter, Buhtrap, Carbanak, Cobalt Strike, CobtInt, Cyst, Metasploit, Meterpreter, Mimikatz, SpicyOmelette
Cybercrime
Botnet Operations, Financial Gain
Qakbot