threat actor

Sowbug

unknownentity:threat_actor

Sowbug has been conducting highly targeted cyber attacks against organizations in South America and Southeast Asia and appears to be heavily focused on foreign policy institutions and diplomatic targets. Sowbug has been seen mounting classic espionage attacks by stealing documents from the organizations it infiltrates.

Curated · btcintel

claims we make, each with its source and citation · sources may contradict; we show the set, never a score

Facts

id: sowbug
kind: threat actor
status: unknown
aliases: G0054
jurisdictions: —
claims naming it: 0 · 0 attributions · 2 relations · 0 events

Identifiers

attack G0054via mitre-attack
misp-galaxy 1ca3b039-404e-4132-88c2-4e41235cd2f5via misp-galaxy-threat-actor

Relations

MITRE ATT&CK Enterpriserecords thatSowbugusesStarloader
fetch —sha256 dc1639caa5501d72
rel_570btcintel:relations:570@v1 sha256:a616a6efbb054d66
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatSowbugusesFelismus
fetch —sha256 dc1639caa5501d72
rel_571btcintel:relations:571@v1 sha256:3ad7754ab8dad794
confidenceauthority data · 60

Events

computedno dated events recorded for this entity

Claims naming this entity

computedno current claim names this entity

Subjects0 subjects carry a claim naming this entity · a sample

computedno subject carries a claim naming this entity

Community

notes from Nostr labelers · never merged with the bands above · not endorsed

Community content is indexed from Nostr and not endorsed by btcintel.

not computed yetNot indexed yet: the community index has not looked at this subject.