🇺🇸

USDoD

APT Group ETDA ✓

Also Known As

No alias recorded

Target Countries 2

Countries highlighted in red

France United States

Sectors Targeted

Computer Systems Design Services 541512 Air Transportation 481

Details

Origin 🇺🇸 US

Last Updated 27 Apr 2024

MITRE ATT&CK 4

T1071.001 T1078 T1133 T1566.001

Related Zero-Days

No zero-day CVE linked to this actor

Known Names 3 entries

NetSec self given

ScarFace_TheOne self given

USDoD self given

Observed Target Countries 1

Based on ETDA data — countries highlighted in red

USA

Description

(Cyble) During our Deepweb search in various forums, security researchers at the Lab identified a prolific TA going by the name NetSec aka ScarFace_TheOne aka Scarfac33 and targeting the U.S. infrastructure. Our research indicated that the TA has been active on the forum for over two years, taking part in various cyberattacks with diverse geographical and dynamic industry footprints. The TA’s malicious cyber activities have helped earn an aggressive reputation, besides resulting in the TA being widely endorsed and acclaimed by other notable malicious actors such as Pompompurin, Holistic-K1ller, and IPegFemBoys.

Operations 4

2022-12 FBI’s Vetted Info Sharing Network ‘InfraGard’ Hacked https://krebsonsecurity.com/2022/12/fbis-vetted-info-sharing-network-infragard-hacked/

2023-09 Airbus investigates data leak allegedly involving thousands of suppliers https://therecord.media/airbus-data-leak-suppliers-breachedforums

2024-04 Hackers leak 2.7 billion data records with Social Security numbers https://www.bleepingcomputer.com/news/security/hackers-leak-27-billion-data-records-with-social-security-numbers/

2024-07 Hacktivist Entity USDoD Claims to Have Leaked CrowdStrike’s Threat Actor List https://www.crowdstrike.com/en-us/blog/hacktivist-usdod-claims-to-have-leaked-threat-actor-list/

Reports & References 4

https://cyble.com/blog/u-s-armed-forces-and-defense-industrial-base-under-cyber-attack/ https://www.databreaches.net/im-not-pro-russia-and-im-not-a-terrorist-infragard-and-airbus-hacker-usdod-unveils-his-new-campaigns/ https://socradar.io/unmasking-usdod-the-enigma-of-the-cyber-realm/ https://hackread.com/usdod-hacker-ssn-leak-reveals-brazilian-citizen/

ETDA Profile

NetSec, USDoD

Origin

Spain

First Seen 2020

Motivation

Financial gain

View on ETDA APT Groups ↗