Apos is a ransomware group that emerged in April 2024, distinguishing itself as a data-broker or leak-only operation rather than employing traditional file-encryption. This group focuses on data exfiltration, threatening to leak or sell stolen information as their primary means of extortion. Unlike many ransomware operations, Apos has not been observed to conduct file encryption. Reporting indicates that its activity tapered off after a few incidents, potentially suggesting it was a short-lived operation or a one-time campaign, and its technical details, such as specific encryption algorithms or ransom notes, remain largely undocumented publicly. The group is sometimes referred to as Apos Security.

Aliases del actor

Putter PandaPLA Unit 61486TG-6952técnicasPISCESLOGJAM o SOGUobtención de credencialesoficiales para este grupolo que sugiere una operación bien coordinadaun enfoque orientado a la sigilocidadTrochilus RATPlugXEvilGrab3102 variant of 9002 RATSeven Pointed Daggerotroslo que sugiere una amplia gama de herramientastécnicas utilizadas en operaciones de amenaza a largo plazo"Energy technology""G20""NGOs""Dissident Groups"MimikatzWmiExectécnicas de persistenciaItaDukese ha enfocado en regiones geopolíticamente sensiblesincluyendo TibetUyghurSiriaIránAfganistán

Actores similares

Conquerors Electronic Armyapt · 0Operation DRBControlapt · 0apt-desertfalconactor · 1Desert Falconsapt · 0Container Orchestration Jobactor · 1Eloquent Pandaapt · 0apt-stealthfalconactor · 1PhantomControlapt · 0Confuciousapt · 0Data from Configuration Repositoryactor · 1

Paises afectados

Sectores atacados

URLs nuevas detectadas en IntelTracker