GINC-APT-0862 · Targeted, sponsor unknown

NyxarGroup

Category
Targeted, sponsor unknown · Targeted intrusions with no sponsor attributed.
Origin
Unknown
Sources
3 sources carry it
Identifier
GINC-APT-0862 · nyxargroup

What it is

NyxarGroup is a threat actor involved in a coordinated data brokerage ecosystem across Latin America, primarily targeting government infrastructure. They have published high volumes of data, including 110,000 records from Chile's Servicio Civil platform and 250GB from the Ley del Lobby platform, which tracks lobbying activities. The data exfiltrated includes limited fields but provides a directory of Chilean government employees, enhancing the visibility of the public sector workforce. NyxarGroup's activities indicate a focus on exploiting government transparency and training systems for data leaks.

Tools

The tools and malware families the sources tie to it.

  • CrossRat
  • Xploit

Sources

  • Malpedia malpedia.caad.fkie.fraunhofer.de