Filter by

Threat profiles

Explore the latest threat group definitions and profiles published by the

Sophos® Counter Threat Unit™ (CTU) Research Team.

Showing 81-90 of 197 profiles

Name	Location	Objectives	Aliases	Tools
GOLD BLAZER	Cybercrime	Financial Gain, Ransomware		BlackCat (also known as ALPHV, Noberus)
GOLD BURLAP	Cybercrime	Financial Gain, Ransomware		ADRecon, Advanced IP Scanner, Advanced Port Scanner, DNSGo RAT, Mimikatz, PEASS, PowerShell Empire, Pysa
GOLD CABIN	Cybercrime	Financial Gain, Spam Operations	Mario Kart (Federal Bureau of Investigation), Monster Libra (Palo Alto Networks), Shathak, TA551 (Proofpoint)	SVCReady
GOLD CAMOUFLAGE	Cybercrime	Financial Gain, Malware Distribution Services		AgentTesla, AsyncRAT, DarkTortilla, LummaC2, MaskGramStealer, Nanocore, PhantomStealer, QuasarRAT, Remcos, XWorm
GOLD CONCORD	Cybercrime	Financial Gain, Malware Distribution Services		RedLine, Setcord
GOLD CRESCENT	Cybercrime	Extortion, Financial Gain, Ransomware	Hunters International, World Leaks	Hunters International, SharpRhino
GOLD CRESTWOOD	Cybercrime	Botnet Operations, Financial Gain	Mummy Spider (CrowdStrike), TA542 (Proofpoint)	Emotet
GOLD CRYSTAL	Cybercrime	Data Theft, Extortion, Financial Gain, Hack and Leak	Scattered LAPSUS$ Hunters, ShinyCorp, ShinyHunters, UNC6240 (Google)
GOLD CRYSTAL	Cybercrime	Data Theft, Extortion, Financial Gain, Hack and Leak	Scattered LAPSUS$ Hunters, ShinyCorp, ShinyHunters, UNC6240 (Google)
GOLD DRAKE	Cybercrime	Botnet Operations, Financial Gain, Ransomware	Evil Corp, Indrik Spider (CrowdStrike), Manatee Tempest (Microsoft)	BitPaymer, Cobalt Strike, Covenant, Donut, Dridex, Hades, Koadic, LockBit, Macaw Locker, Mimikatz, Payload.Bin, Phoenix CryptoLocker, PowerShell Empire, PowerSploit, SocGholish, WastedLocker

…

…