threat actor
APT73
APT73 is a ransomware group that has publicly identified 12 victims and launched its data leak site on April 25th. The DLS bears a striking resemblance to that of LockBit, likely to leverage LockBit's reputation and attract potential affiliates. The rationale for this design mimicry is unclear, but it may be intended to signal operational parity with LockBit to inspire trust among low-level criminals. APT73 was formed by an alleged former LockBit affiliate following law enforcement's "Operation
Curated · btcintel
claims we make, each with its source and citation · sources may contradict; we show the set, never a score
Facts
- id
- apt73
- kind
- threat actor
- status
- unknown
- aliases
- Apt73 · Eraleig · Eraleign
- jurisdictions
- —
- claims naming it
- 0 · 0 attributions · 0 relations · 0 events
Identifiers
- misp-galaxy 84bf7b38-e120-44c9-bfdd-82740593a6c6via misp-galaxy-threat-actor
- misp-galaxy 8855d8b5-7082-5504-aca4-24a83eca1197via misp-galaxy-ransomware
Relations
computedno relations recorded for this entity
Events
computedno dated events recorded for this entity
Claims naming this entity
computedno current claim names this entity
Subjects0 subjects carry a claim naming this entity · a sample
computedno subject carries a claim naming this entity
Community
notes from Nostr labelers · never merged with the bands above · not endorsed
Community content is indexed from Nostr and not endorsed by btcintel.
not computed yetNot indexed yet: the community index has not looked at this subject.