Madi, also known as Mahdi, is a cyber espionage threat actor group that first emerged in December 2011, primarily targeting entities in the Middle East. The group's motivation is intelligence gathering, and its operations are characterized by the use of social engineering and custom malware. Madi is distinguishable by its consistent focus on data exfiltration from government, financial, academic, and critical infrastructure sectors, executed by Farsi-speaking individuals. While some early reports suggested potential state-sponsorship, this has not been conclusively confirmed, with some research indicating operations by an unknown Farsi-speaking hacker with a broad agenda. Madi has been noted for the relatively basic nature of its malware and infrastructure compared to other sophisticated groups, yet it achieved sustained surveillance against high-profile victims through persistence.

Aliases del actor

HellsingCycldekConimes TeamChina1937CN Teamotros mencionados en fuentes OSINT verificadasTEMPMoonlight_Mazeestá vinculado a actividades de ciberataquesAustralian Parliament HackCitrix HackChina ChopperCkife WebshellsLazyCatreGeorgeotrosDustSquadPaperbug Operationreferencias a entidades diplomáticasusuarios del centro asiáticoespecialmente en entornos japonesesTigerZINCGemini

Actores similares

TurkHackTeamapt · 0Hacking Teamapt · 0apt-hackingteamactor · 1turkhackteamactor · 1the-whois-hacking-teamactor · 1Operation SLOW#TEMPESTapt · 0RAZOR TIGERapt · 0VICEROY TIGERapt · 0HAZY TIGERapt · 0Roaming Tigerapt · 0