MosesStaff is a politically motivated threat actor attributed with high confidence to be of Iranian origin, first emerging in September 2021 with operations targeting Israeli organizations. The group's primary motivation is to advance Iran's geopolitical goals by causing disruption and damage rather than seeking financial gain. A defining characteristic of MosesStaff is their use of ransomware-like techniques to encrypt victim networks without demanding ransom payments, opting instead to inflict damage, disrupt operations, and often leak stolen data publicly. Over time, the group has shown an increasing use of destructive wiper malware and a growing interest in exploiting VPN vulnerabilities. MosesStaff operates under several aliases, including COBALT SAPLING, DEV-0500, Marigold Sandstorm, Group G1009, and has been linked to Abraham's Ax as a mirror group.

Aliases del actor

Cobalt SaplingWhite Dev 95Marigold SandstormAbrahams_AxVengeful KittenMosesStaffG1009MarigoldSandstormAbraham's AxDEV-0500

Actores similares

vengeful-kittenactor · 1Fox Kittenapt · 1Charming Kittenactor · 1cutting-kittenactor · 1clever-kittenactor · 1charming-kittenactor · 1rocket-kittenactor · 1flash-kittenactor · 1domestic-kittenactor · 1fox-kittenactor · 1