FulcrumSec: Threat Actor Profile
Attribution: Unknown, financially motivated cybercriminal group First Observed: 2025 Primary Operations: Data exfiltration, cloud data exposure, source code leaks, public...
Attribution: Unknown, financially motivated cybercriminal group First Observed: 2025 Primary Operations: Data exfiltration, cloud data exposure, source code leaks, public...
Attribution: Suspected pro-Iranian hacktivist group First Observed: October 2025 Primary Operations: Data breach claims, infrastructure targeting, hacktivist campaigns, data leaks...
Also Known As: Citrine Sleet, AppleJeus, Golden Chollima, Gleaming Pisces, Labyrinth Chollima, Nickel Academy, Hidden Cobra Attribution: Bureau 121, Reconnaissance...
Also Known As: Spearwing Attribution: China, financially motivated First Observed: 2023 Primary Operations: Ransomware deployment (Medusa), N-day and zero-day vulnerability...
Also Known As: PCPcat, ShellForce, DeadCatx3, PersyPCP, CanisterWorm First Observed: September 2025 Primary Operations: Supply chain compromise, credential theft, ransomware...
Also Known As: Void Manticore, Red Sandstorm, Banished Kitten, Storm-842 Attribution: Iran Ministry of Intelligence and Security (MOIS) First Observed:...
Attribution: Financially motivated cybercriminal group, suspected French-speaking members First Observed: 2020 Primary Operations: Large-scale database theft, credential harvesting, data extortion,...
