Filter by

Threat profiles

Explore the latest threat group definitions and profiles published by the

Sophos® Counter Threat Unit™ (CTU) Research Team.

Showing 131-140 of 197 profiles

Name	Location	Objectives	Aliases	Tools
GOLD MYSTIC	Cybercrime	Financial Gain, Ransomware		LockBit, StealBit
GOLD NIAGARA	Cybercrime	Data Theft, Financial Gain	Calcium (Symantec), Carbanak, Carbon Spider (CrowdStrike), FIN7 (FireEye), Navigator (Fox-IT), Sangria Tempest (Microsoft), TelePort Crew (tr1adx)	Bateleur, Carbanak, Cobalt Strike, DICELOADER, DRIFTPIN, GGLDR, GRIFFON, JSSLoader, Meterpreter, OFFTRACK, PILLOWMINT, POWERTRASH, SUPERSOFT, TAKEOUT, TinyMet
GOLD NORTHFIELD	Cybercrime	Financial Gain, Ransomware		LV Ransomware
GOLD OGRE	Cybercrime	Extortion, Financial Gain, Ransomware	Aur0ra	Aur0ra, Cobalt Strike, ISL Light, s5cmd, SharpShares
GOLD OGRE	Cybercrime	Extortion, Financial Gain, Ransomware	Aur0ra	Aur0ra, Cobalt Strike, ISL Light, s5cmd, SharpShares
GOLD OLDFIELD	Cybercrime	Financial Gain, Ransomware		Cobalt Strike, MegaCortex, Metasploit / Meterpreter, Meterpreter
GOLD ORION	Cybercrime	Financial Gain, Ransomware	Wine Tempest (Microsoft)	Dharma
GOLD PARAKEET	Cybercrime	Financial Gain, Ransomware		Netwalker
GOLD PHANTOM	Cybercrime	Financial Gain, Ransomware		Egregor
GOLD PRELUDE	Cybercrime	Financial Gain, Malware Distribution Services	Mustard Tempest (Microsoft), TA569 (Proofpoint), UNC1543 (Mandiant)	SocGholish

…

…