- Category
- Criminal · Financially motivated: ransomware, fraud and theft.
- Origin
- Unknown
- Sources
- 3 sources carry it
- Identifier
- GINC-APT-0700 · datasuckers
What it is
DataSuckers is a financially motivated hacking group linked to major data breaches affecting businesses in Russia and Ukraine, with claims of having stolen 2-3 TB of data from approximately 68 million customers. The group has demonstrated TTPs such as customer data theft, extortion through ransom demands, and website defacement. They have claimed responsibility for high-profile attacks on ATB Market, Dodo Pizza, and Tez Tour, and reportedly obtained sensitive customer and employee information during these breaches. While DataSuckers maintains a Telegram channel for communications, its operations have drawn the attention of Russian authorities, resulting in the detention of several key members.
Tools
The tools and malware families the sources tie to it.
- Hacking Team UEFI Rootkit
Sources
- Malpedia malpedia.caad.fkie.fraunhofer.de