GINC-APT-0669 · Criminal

Chronus Group

Category
Criminal · Financially motivated: ransomware, fraud and theft.
Origin
Unknown
Sources
3 sources carry it
Identifier
GINC-APT-0669 · chronus-group

What it is

Chronus Team is a hacktivist group known for defacement attacks and data leaks, primarily targeting public-sector organizations in Mexico. They have been linked to multiple cyber incidents, including a significant breach of the Sonora Ministry of Education and Culture, where they allegedly exfiltrated sensitive data on educators. Their operations involve traditional hacking methods and the distribution of stolen data through channels typical of cybercriminals. The group's activities raise concerns about identity theft, fraud, and the destabilization of public institutions due to the exposure of sensitive information.

Tools

The tools and malware families the sources tie to it.

  • Cyber Eye RAT
  • CyberGate
  • Hacking Team UEFI Rootkit

Sources

  • Malpedia malpedia.caad.fkie.fraunhofer.de