GINC-APT-0698 · Targeted, sponsor unknown

DarkRaaS

Category
Targeted, sponsor unknown · Targeted intrusions with no sponsor attributed.
Origin
Unknown
Sources
3 sources carry it
Identifier
GINC-APT-0698 · darkraas

What it is

DarkRaaS is a threat actor specializing in selling unauthorized access to various organizations' systems and networks across multiple countries, with a recent focus on targets in Israel, UAE, Turkey, and South America 4 9 20. The group has been operating for at least six years and typically offers access to sensitive data, internal systems, and infrastructure, with prices ranging up to $25,000 for VPN access 4 9. Their targets span various sectors including government institutions, educational facilities, oil and gas companies, and IT organizations, often claiming to have access to multiple terabytes of sensitive data 7 19.

Tools

The tools and malware families the sources tie to it.

  • CrossRat
  • DarkRat

Sources

  • Malpedia malpedia.caad.fkie.fraunhofer.de