- Category
- Criminal · Financially motivated: ransomware, fraud and theft.
- Origin
- Spain(high confidence)
- Motivation
- Financial gain
- Seen
- 2020
- Sources
- 5 sources carry it
- Identifier
- GINC-APT-0472 · usdod
SpainWhat it is
USDoD is a threat actor known for leaking large databases of personal information, including from companies like Airbus and the U.S. Environmental Protection Agency. They have a history of engaging in high-profile data breaches, such as exposing data from the FBI's InfraGard program. USDoD has also been involved in web scraping to obtain information from websites like LinkedIn.
Names
The names each vendor, agency and source gives it. Naming differs by who tracks the actor, so one group carries many.
- Operations
- Operation “Data Breach”
- Other names
- NetSec, NetSec, USDoD, ScarFace_TheOne
Attribution
Each attribution is a claim: who makes it, and to whom. Western and Eastern sources are kept apart, as they often disagree.
Western sources
Targets
- Countries
- United States
- Sectors
- Defense
Sources
- ETDA Threat Group Card apt.etda.or.th
- Malpedia malpedia.caad.fkie.fraunhofer.de