Filter by

Threat profiles

Explore the latest threat group definitions and profiles published by the

Sophos® Counter Threat Unit™ (CTU) Research Team.

Showing 161-170 of 197 profiles

Name	Location	Objectives	Aliases	Tools
GOLD TOMAHAWK	Cybercrime	Extortion, Financial Gain	Karakurt, Karakurt Lair, Karakurt Team	7-Zip, AnyDesk, Mega, QuickPacket, Rclone, SendGB
GOLD TOPAZ	Cybercrime	Financial Gain, Ransomware		PSCP, RagnarLocker
GOLD ULRICK	Cybercrime	Financial Gain, Ransomware	Grim Spider (CrowdStrike), UNC1878 (Mandiant)	Bloodhound, Buer Loader, Cobalt Strike, Conti, Diavol, PowerShell Empire, Ryuk, SystemBC, Team9 (aka BazarLoader), TrickBot
GOLD VICTOR	Cybercrime	Financial Gain, Ransomware	DEV-0832 (Microsoft), STAC5279 (Sophos), Vanilla Tempest (Microsoft), Vice Society, Vice Spider (CrowdStrike)	Advanced IP Scanner, Advanced Port Scanner, HelloKitty ransomware, INC ransomware, MEGAsync, Neshta, PAExec, PolyVice ransomware, PortStarter, PsExec, QuantumLocker ransomware, Rhysida ransomware, Supper, SystemBC, Zeppelin ransomware
GOLD VILLAGE	Cybercrime	Financial Gain, Ransomware		Maze
GOLD WATERFALL	Cybercrime	Financial Gain, Ransomware		BlackMatter, CANVAS, Cobalt Strike, Darkside
GOLD WESTMORE	Cybercrime	Financial Gain, Ransomware		Cobalt Strike, LockerGoga, Metasploit / Meterpreter
GOLD WINDSOR	Cybercrime	Financial Gain	FIN9 (Mandiant)
GOLD WINTER	Cybercrime	Financial Gain, Ransomware		Advanced Port Scanner, Cobalt Strike, Hades, MegaSync, Metasploit, Mimikatz, MSBuild, PsExec, SocGholish
GOLD WISDOM	Cybercrime	Financial Gain, Ransomware		REvil

…

…