Filter by

Threat profiles

Explore the latest threat group definitions and profiles published by the

Sophos® Counter Threat Unit™ (CTU) Research Team.

Showing 141-150 of 197 profiles

Name	Location	Objectives	Aliases	Tools
GOLD PRESCOTT	Cybercrime	Financial Gain, Spam Operations	CTG-9419 (SCWX CTU)	Cutwail, Cutwail Trojan
GOLD PUMPKIN	Cybercrime	Financial Gain	HellCat
GOLD RAINFOREST	Cybercrime	Extortion, Financial Gain	Lapsus$, Slippy Spider (CrowdStrike), Strawberry Tempest (Microsoft)	Mimikatz
GOLD REBELLION	Cybercrime	Financial Gain, Ransomware		AnyDesk, Black Basta, Brute Ratel C4, MegaSync, PsExec, QakBot, Quick Assist, Rclone, SystemBC
GOLD RETREAT	Cybercrime	Financial Gain		Advanced Port Scanner, AnyDesk, Atera Agent, BianLian, Impacket, Mega, Rclone, TeamViewer
GOLD RIVERVIEW	Cybercrime	Financial Gain, Spam Operations		Necurs
GOLD ROCOCO	Cybercrime	Financial Gain, Malware Distribution Services		Raccoon Stealer
GOLD SAHARA	Cybercrime	Financial Gain, Ransomware		AdFind, Advanced IP Scanner, Akira, AnyDesk, LaZagne, Level.io, LogMeIn, MEGA, Megazord, Mimikatz, PCHunter64, PuTTY, Rclone, SoftPerfect Network Scanner, WinRAR
GOLD SALEM	Cybercrime	Data Theft, Extortion, Ransomware	Storm-2603 (Microsoft), Warlock Group	AV Killer, Babuk, Cloudflared, Everything, Impacket, LockBit, Mimikatz, PsExec, Velociraptor, Warlock
GOLD SHERWOOD	Cybercrime	Data Theft, Extortion, Financial Gain, Malware as a Service, Ransomware		AnyDesk, Cobalt Strike, GentleKiller, HavocKiller, HexKiller, Impacket, OxideHarvest, SystemBC, The Gentlemen ransomware, ThrottleBlood

…

…