GINC-APT-0700 · Criminal

DataSuckers

Category
Criminal · Financially motivated: ransomware, fraud and theft.
Origin
Unknown
Sources
3 sources carry it
Identifier
GINC-APT-0700 · datasuckers

What it is

DataSuckers is a financially motivated hacking group linked to major data breaches affecting businesses in Russia and Ukraine, with claims of having stolen 2-3 TB of data from approximately 68 million customers. The group has demonstrated TTPs such as customer data theft, extortion through ransom demands, and website defacement. They have claimed responsibility for high-profile attacks on ATB Market, Dodo Pizza, and Tez Tour, and reportedly obtained sensitive customer and employee information during these breaches. While DataSuckers maintains a Telegram channel for communications, its operations have drawn the attention of Russian authorities, resulting in the detention of several key members.

Tools

The tools and malware families the sources tie to it.

  • Hacking Team UEFI Rootkit

Sources

  • Malpedia malpedia.caad.fkie.fraunhofer.de