- Category
- Criminal · Financially motivated: ransomware, fraud and theft.
- Origin
- Unknown
- Sources
- 3 sources carry it
- Identifier
- GINC-APT-0630 · adrastea
What it is
Adrastea is a threat actor who has been active on cybercrime forums, claiming to have breached organizations like MBDA and offering stolen data for sale. They describe themselves as a group of independent cybersecurity experts and researchers. Adrastea has been linked to ransomware operations, data leak platforms, and network access groups. The actor has been known to exploit critical vulnerabilities in target organizations' infrastructure to gain access to sensitive data.
Tools
The tools and malware families the sources tie to it.
- Archelaus Beta
- Cyber Eye RAT
- CyberGate
- Xpert
- Xploit
Sources
- Malpedia malpedia.caad.fkie.fraunhofer.de