Apos is a ransomware group that emerged in April 2024, distinguishing itself as a data-broker or leak-only operation rather than employing traditional file-encryption. This group focuses on data exfiltration, threatening to leak or sell stolen information as their primary means of extortion. Unlike many ransomware operations, Apos has not been observed to conduct file encryption. Reporting indicates that its activity tapered off after a few incidents, potentially suggesting it was a short-lived operation or a one-time campaign, and its technical details, such as specific encryption algorithms or ransom notes, remain largely undocumented publicly. The group is sometimes referred to as Apos Security.

Aliases del actor

lo que sugiere una red de actividades coordenadasComment PandaPLA Unit 61398TG-8223APT1BrownFoxGroup 3GIF89aShadyRATShanghai GroupByzantine CandorG0006TG-0110APT3BuckeyeUPS TeamGroup 6Boyusec – the Guangzhou Boyu Information Technology CompanyLtd1Pitty PandaG0011Paladin RATCVE-2015-2545TaiwanThailandTamper Pandarefuerzan la necesidad de monitoreo continuo"Hong Kong dissidents"indica una posible operación transnacional o regional8KeyBoys

Actores similares

Conquerors Electronic Armyapt · 0Operation DRBControlapt · 0apt-desertfalconactor · 1Desert Falconsapt · 0Container Orchestration Jobactor · 1Eloquent Pandaapt · 0apt-stealthfalconactor · 1PhantomControlapt · 0Stealth Falconapt · 1Confuciusapt · 1

Paises afectados

Sectores atacados

URLs nuevas detectadas en IntelTracker