Mustard Tempest, also known by aliases including DEV-0206, TA569, GOLD PRELUDE, UNC1543, Evil Corp, and Purple Vallhund, is a financially motivated cybercriminal group. It emerged around 2017, primarily functioning as an initial access broker and a Malware-as-a-Service vendor. The group is assessed with high confidence to be of Russian origin, with its activities closely linked to the notorious Russian cybercrime syndicate Evil Corp. Its primary motivation is to monetize initial access to networks by operating the SocGholish distribution network, selling compromised systems to other criminal organizations for subsequent ransomware deployment and other financially driven attacks. What specifically sets Mustard Tempest apart is its sustained and prolific use of fake software updates and compromised websites to achieve broad initial compromise, utilizing sophisticated traffic distribution systems to filter and redirect victims before selling the gained access to a diverse range of cybercr

Aliases del actor

DEV-0206Purple Vallhund

Actores similares

devmanransomware · 184Network Devicesactor · 1Compromise Software Dependencies and Development Toolsactor · 1Device Driver Discoveryactor · 1Cinnamon Tempestactor · 1CS FQL: 32. Detect Data Exfiltration via external storage devicesactor · 1dev-0322actor · 1dev-0343actor · 1weredevilsactor · 1DEV-0147apt · 0

Sectores atacados