Uptime Hamster: 3d 5h 31mDeploy: 14 Jul 2026 21:26Updated: 2026-07-16
Logo del actor de amenaza Water Sigbin

Water Sigbin

0 incidentes 0 paises 0 sectores apt CN Ultimo: -
Aliases: 8220 Gang
Ver en IntelTracker → APTTrail →
Water Sigbin, also known as 8220 Gang, is a financially motivated cybercriminal group assessed with moderate confidence to be of Chinese origin, primarily focused on cryptojacking and distributed denial-of-service (DDoS) operations. Active since at least 2017, the group distinguishes itself through its opportunistic exploitation of unpatched systems and misconfigured public-facing cloud infrastructure and applications, often leveraging a relatively low-skill approach that has evolved to incorporate more sophisticated evasion techniques over time. The group's primary objective is to compromise systems to install cryptocurrency miners, predominantly for Monero, and to establish IRC-based botnets for resource hijacking and DDoS attacks.

Aliases del actor

8220 Gang

Actores similares

blackwaterransomware · 11clearwateractor · 1MuddyWaterapt · 1yanbian-gangactor · 1muddywateractor · 1Water Labbuapt · 0Water Gamayunapt · 0Chamelgangapt · 0Water Saciapt · 0Water Barghestapt · 0
Tecnicas MITRE
T1203, T1496, T1110.001, T1071.001, T1059.004
CVEs relacionadas
CVE-2023-21839, CVE-2017-3506
Tipo
apt
Pais origen
CN
Motivacion
-
Impacto
9
Actualizado
Mon, 16 Ju

Sectores objetivo (SOCRadar)

Energy & Utilities Construction of BuildingsComputer Systems Design Services