GINC-APT-0811 · Targeted, sponsor unknown

KelvinSecurity

Also Kelvin Security.

Category
Targeted, sponsor unknown · Targeted intrusions with no sponsor attributed.
Origin
Spain(high confidence)
Sources
3 sources carry it
Identifier
GINC-APT-0811 · kelvinsecurity

What it is

KelvinSecurity is a hacker group that has been active since at least 2015. They are known for their hacktivist and black hat activities, targeting public and private organizations globally. The group sells and leaks databases, documents, and access belonging to their victims, often on the dark web or their own platforms. They have been involved in attacks against various sectors, including telecommunications, political parties, and healthcare.

Names

The names each vendor, agency and source gives it. Naming differs by who tracks the actor, so one group carries many.

Other names
Kelvin Security

Attribution

Each attribution is a claim: who makes it, and to whom. Western and Eastern sources are kept apart, as they often disagree.

Tools

The tools and malware families the sources tie to it.

  • BLACKCOFFEE
  • BlackEnergy
  • BlackHole
  • BlackNix
  • Blackshades
  • Dark DDoSeR

Sources

  • Malpedia malpedia.caad.fkie.fraunhofer.de