HAFNIUM is a state-sponsored cyber espionage group, assessed with high confidence to operate out of China and linked to its Ministry of State Security. The group emerged with notable activity as early as December 2020, becoming widely known in early 2021 for its exploitation of zero-day vulnerabilities in Microsoft Exchange Server. HAFNIUM distinguishes itself by its speed in operationalizing newly discovered vulnerabilities in internet-facing infrastructure and often employs a multi-tier contracting model, utilizing nominally private Chinese firms to conduct its operations. While primarily targeting entities in the United States, its operations extend globally. The group is also known by the aliases Silk Typhoon, Operation Exchange Marauder, Murky Panda, Red Dev 13, and G0125, and has connections to APT40.

Aliases del actor

Hade ransomwareTimosaraHackerTerm

Actores similares

hadesransomware · 2hade-ransomwareactor · 1lockbit3ransomware · 2016qilinransomware · 1933akiraransomware · 1524playransomware · 1268clopransomware · 1254lockbit2ransomware · 1002ransomhubransomware · 842incransomransomware · 832