GhostR is a sophisticated cyber threat actor known for conducting cyber espionage and ransomware attacks, driven by both financial motives and strategic intelligence gathering. The group has been active since at least 2018 and has been linked to numerous high-profile breaches, distinguishing itself by combining both financially motivated ransomware operations with state-sponsored cyber espionage activities. They are suspected to be of Chinese origin. The group's operational model has evolved to include the exploitation of known vulnerabilities, customized malware, and a recent shift towards living-off-the-land binaries and cloud infrastructure targeting.

Actores similares

GhostRedirectorapt · 0