Void Balaur is a financially motivated cybermercenary group that emerged in 2015, known for extensive cyber-espionage and data theft campaigns. The group, also operating under the alias Rockethack and previously Hacknet, advertises its services on Russian-language underground forums, where it has gained a reputation for reliably delivering requested information. Unlike traditional APT groups, Void Balaur operates as a hack-for-hire entity, selling stolen sensitive personal and financial data, as well as providing hacking services to a diverse clientele. Their unique offerings include the ability to obtain full email mailbox copies without user interaction, suggesting a high level of access potentially through compromised service providers or insider threats, which distinguishes them from many other threat actors. Trend Micro formally named the group Void Balaur in November 2021 after tracking their broader activities, initially observing overlaps in targeting with groups like APT28 but

Aliases del actor

https: o www

Actores similares

void-balauractor · 1Void Blizzardapt · 0Void Arachneapt · 0Void Rabisuapt · 0Void Manticoreapt · 0Void Bansheeapt · 0SHADOW-VOID-042apt · 0VoidCryptransomware · 0