ClassicBrechasMapaActoresTTP MatrixAnaliticaAlertasCyberNewsArsenalExploitsKillChainOrigenSSLBLRansomLookRansomwhere
lead
1 incidentes
1 paises
0 sectores
Ultimo: 2026-07-09
Aliases: G0023, ELMER backdoor, Gh0st, HTRAN, UNICAT, Poison Ivy, Pandora, APT BLACKGEAR, APT BLACKTECH, matadoor, APT SAGUARO, una reputación de actividad prolongada, "Energy technology", "G20", "NGOs", "Dissident Groups", AdvisorsBot, PoshAdvisor
Aliases del actor
G0023ELMER backdoorGh0stHTRANUNICATPoison IvyPandoraAPT BLACKGEARAPT BLACKTECHmatadoorAPT SAGUAROuna reputación de actividad prolongada"Energy technology""G20""NGOs""Dissident Groups"AdvisorsBotPoshAdvisorotros relacionados con empleados de hotelesrestaurantesreclutadores en telecomunicacionesactividades criminalesPalmerwormPhantom of RoutersG0098PLEADShrouded CrossbowWaterbear
Actores similares
Canales, DLS e infraestructura asociada
Clasificacion automatica desde IntelTracker/APTTrail/OSINT. Estado real solo si viene indicado por la fuente.
| Tipo | Estado | Host / enlace | Title / ultimo titulo |
|---|---|---|---|
| Foro | unknown | www.breachsense.com | sourcelead.com - RaidForums Data Breach |
| Foro | unknown | getbootstrap.com | sourcelead.com - RaidForums Data Breach |
| Foro | unknown | github.com | sourcelead.com - RaidForums Data Breach |
| Foro | unknown | github.com | sourcelead.com - RaidForums Data Breach |
| Foro | unknown | github.com | sourcelead.com - RaidForums Data Breach |
| DLS / leak site | unknown | nitter.net | Ido Cohen: Tracking the pulse of ransomware in 2026—these are the groups leading the global attack landscape right now: Qilin – 665 attacks The Gentleman – 453 attacks Akira – 290 attacks DragonForce – 245 attacks INC – 239 attacks Lockbit – 199 attacks Play – 154 attacks CLOP – 127 attacks NightSpire – 115 attacks CoinBase Cartel – 97 attacks Stay ahead of ransomware threats. |
| X/Twitter | unknown | x.com | Ido Cohen: Tracking the pulse of ransomware in 2026—these are the groups leading the global attack landscape right now: Qilin – 665 attacks The Gentleman – 453 attacks Akira – 290 attacks DragonForce – 245 attacks INC – 239 attacks Lockbit – 199 attacks Play – 154 attacks CLOP – 127 attacks NightSpire – 115 attacks CoinBase Cartel – 97 attacks Stay ahead of ransomware threats. |
| Foro | unknown | nitter.net | Daily Dark Web: Alleged Compromise of Colima State Government Electronic Signature System A threat actor claims to have compromised the Advanced Electronic Signature (Firma Electrónica Avanzada) platform used by the Government of the State of Colima, Mexico. * According to the forum post, the actor alleges they: * Gained administrative access to the portal. * Deleted all user accounts except a single administrator account. * Retained control of the remaining administrative account. |
| Foro | unknown | x.com | Daily Dark Web: Alleged Compromise of Colima State Government Electronic Signature System A threat actor claims to have compromised the Advanced Electronic Signature (Firma Electrónica Avanzada) platform used by the Government of the State of Colima, Mexico. * According to the forum post, the actor alleges they: * Gained administrative access to the portal. * Deleted all user accounts except a single administrator account. * Retained control of the remaining administrative account. |
| DLS / leak site | unknown | nitter.net | Hackmanac: Cyber Alert ‼ USA - 𝗣𝗼𝗹𝘆𝗺𝗮𝗿𝗸𝗲𝘁 Polymarket confirmed a third-party compromise that enabled attackers to inject malicious code into its website, leading to the theft of user funds. The company contained the incident and will refund affected users. Around the same time, researchers reported a phishing campaign targeting Polymarket users that allegedly stole about US$3 million in cryptocurrency. |
| X/Twitter | unknown | x.com | Hackmanac: Cyber Alert ‼ USA - 𝗣𝗼𝗹𝘆𝗺𝗮𝗿𝗸𝗲𝘁 Polymarket confirmed a third-party compromise that enabled attackers to inject malicious code into its website, leading to the theft of user funds. The company contained the incident and will refund affected users. Around the same time, researchers reported a phishing campaign targeting Polymarket users that allegedly stole about US$3 million in cryptocurrency. |
| DLS / leak site | unknown | duckduckgo.com | LEAD (China) |
| DLS / leak site | unknown | duckduckgo.com | LEAD (China) |
| DLS / leak site | unknown | duckduckgo.com | Apache ActiveMQ Exploit Leads to LockBit Ransomware |
| DLS / leak site | unknown | duckduckgo.com | Apache ActiveMQ Exploit Leads to LockBit Ransomware |
| DLS / leak site | unknown | duckduckgo.com | KongTuke FileFix Leads to New Interlock RAT Variant |
| DLS / leak site | unknown | duckduckgo.com | KongTuke FileFix Leads to New Interlock RAT Variant |
| DLS / leak site | unknown | duckduckgo.com | Hide Your RDP: Password Spray Leads to RansomHub Deployment |
| DLS / leak site | unknown | duckduckgo.com | Hide Your RDP: Password Spray Leads to RansomHub Deployment |
China (1)