Skip to Content

Threat profiles

Explore the latest threat group definitions and profiles published by the 

Sophos® Counter Threat Unit™ (CTU) Research Team.

Showing 121-130 of 197 profiles
NameLocationObjectivesAliasesTools
Cybercrime
Data Theft, Extortion, Financial Gain, Ransomware
AnyDesk, EDRSandBlast, FileZilla, Impacket, QDoor, SafePay, ScreenConnect, ShareFinder, SharpShares, TeamViewer, WinSCP
Cybercrime
Financial Gain, Malware Distribution Services
RIG Exploit Kit
Cybercrime
Financial Gain
Anunak, Carbanak, Carbon Spider (CrowdStrike), FIN7 (FireEye), Silicon (Symantec)
Carbanak
Cybercrime
Financial Gain, Ransomware
BlackByte, Hecamede (Symantec)
BlackByte, Cobalt Strike, ExByte, MEGA, RDP, SoftPerfect Network Scanner
Cybercrime
Financial Gain, Ransomware
Lorenz, SMBExec
Cybercrime
Financial Gain, Ransomware
Boss Spider (CrowdStrike), CTG-0007 (SCWX CTU)
Samas
Cybercrime
Financial Gain, Ransomware
AdFind, Cobalt Strike, MegaSync, Mimikatz, Nefilim, Nemty
Cybercrime
Data Theft, Extortion, Hack and Leak, Ransomware
DevMan
Cybercrime
Financial Gain, Ransomware
Cobalt Strike, FileZilla, Hive, Mimikatz, Netscan, NTDSUtil, PCHunter64, PowerSploit, RDP, SystemBC
Cybercrime
Financial Gain
PROPHET SPIDER, UNC961
7-Zip, 7-ZIP, AUDITUNNEL, BURP Suite, GOTROJ, JSP webshells, Mimikatz, Wget