Poseidon Group is a Portuguese-speaking advanced persistent threat group that first emerged with samples dating back to 2001, becoming actively observed since at least 2005. Originating from Brazil, the group's primary motivation is information theft and espionage, distinguishing itself through a unique business model where it blackmails victim organizations, using exfiltrated data, into hiring Poseidon Group as a security consulting firm. The custom malware utilized by the group is specifically engineered to function on both English and Portuguese operating systems. The group is also tracked by MITRE ATT&CK as G0033, and it should be noted that this threat actor is distinct from other entities also named Poseidon Group that are involved in diverse sectors such as shipping, aquaculture, or medical classifications, and also distinct from the 'PoSeidon' Point-of-Sale malware or the 'Poseidon Infostealer' targeting Mac users.

Aliases del actor

G0033

Actores similares

silentransomgroupactor · 36GroupIB_TIactor · 11bonacigroupransomware · 2thegreenbloodgroupransomware · 2vanirgroupransomware · 2SilentRansomGroupactor · 2apt-equationgroupactor · 1apt-group5actor · 1bluewindgroupactor · 1Permission Groups Discoveryactor · 1