Threat Actor 888 is a financially motivated cybercriminal entity that emerged in May 2024, specializing in data breaches and exfiltration for monetization. This group has evolved to operate as a high-end data and compromise broker, shifting from traditional encryption-based ransomware towards an "exfiltrate and auction" model that prioritizes the silent theft and sale of technical intellectual property and sensitive corporate and personal data. Their primary motivation is financial gain, achieved by selling stolen information on underground forums, sometimes through ransomware operations. What distinguishes Threat Actor 888 is its reputation as a "Kingpin" within underground breach forums, where it actively leaks data from high-profile organizations such as Microsoft, BMW, Shell, and LG.

Actores similares

Scattered Lapsus$ Huntersthreat-actor · 1other-actorsactor · 72unknown---unmapped-actorsactor · 42emerging-threatsactor · 3Threat Group-1314apt · 1Threat Group-3390apt · 0Actor240524apt · 0Unnamed Actorapt · 0Threatsecapt · 0GoldFactoryapt · 0