- Category
- Targeted, sponsor unknown · Targeted intrusions with no sponsor attributed.
- Origin
- Unknown
- Seen
- to 2026
- Status
- Active
- ATT&CK
- G0139 · 56 techniques
- Sources
- 7 sources carry it
- Identifier
- GINC-APT-0250 · teamtnt
What it is
TeamTNT is a threat group that has primarily targeted cloud and containerized environments. The group as been active since at least October 2019 and has mainly focused its efforts on leveraging cloud and container resources to deploy cryptocurrency miners in victim environments.
Names
The names each vendor, agency and source gives it. Naming differs by who tracks the actor, so one group carries many.
- MITRE ATT&CK
- G0139
- Other names
- Adept Libra
Tools
The tools and malware families the sources tie to it.
- Backdoor.Oldrea
- CloudDuke
- Hildegard
- LaZagne
- MimiPenguin
- Peirates
- Unknown Logger
- Xploit
Sources
- MITRE ATT&CK attack.mitre.org
- Malpedia malpedia.caad.fkie.fraunhofer.de