Returned Libra is a cyber espionage group with suspected links to state-sponsored activities, primarily driven by motivations of data exfiltration and financial gain. The group distinguishes itself through the execution of highly coordinated phishing campaigns, the exploitation of zero-day vulnerabilities, and the persistent use of advanced techniques to maintain covert access to targeted networks. They frequently deploy custom-built malware and have demonstrated an ability to circumvent established security measures. While specific details regarding their initial emergence are not publicly available, their operational focus remains on long-term intrusion and the illicit acquisition of data for monetary benefit. Returned Libra should be differentiated from the 8220 Mining Group, which operates with a distinct focus on cryptocurrency mining.

Aliases del actor

8220 Mining Group

Actores similares

returned-libraactor · 1silentransomgroupactor · 36GroupIB_TIactor · 11bonacigroupransomware · 2thegreenbloodgroupransomware · 2vanirgroupransomware · 2SilentRansomGroupactor · 2apt-equationgroupactor · 1apt-group5actor · 1bluewindgroupactor · 1