70
Sophistication
2022
First Seen
69
Notoriety
62
Stealth
73
Immersive Rating
76
Impact
60
Tactics Variety
Abstract humanoid figure swirling in blue waves with lock and envelope symbols around a dark background.

HAFNIUM

Chinese group behind the 2021 Microsoft Exchange Server exploitation spree. Attacks allowed mass access to internal emails across thousands of organizations. Known for stealthy exfiltration and fast-moving campaigns.

Key behaviours to watch:

Immersive coverage includes:

Turla cyber threat profile with a snake, Kremlin tower, and scores for malware, victims, and attacks.Brand logo with blue shapes and the word immersive above the text Learn More on black background.
Turla
82
2008
75
80
74
92
88
Van Helsing ransomware group card with stats and dark figure with glowing eyes and cross necklace.Brand logo with blue shapes and the word immersive above the text Learn More on black background.
Van Helsing
70
2025
45
50
61
44
50
Illustration of a tornado-like humanoid figure with lightning, labeled Volt Typhoon intel card with stats and description.Brand logo with blue shapes and the word immersive above the text Learn More on black background.
Volt Typhoon
85
2021
76
78
88
85
87
Wild Neutron intel card showing a glowing atom symbol in forest and corporate espionage stats.Brand logo with blue shapes and the word immersive above the text Learn More on black background.
Wild Neutron
80
2014
55
62
44
70
73
Wizard Spider card with cloaked figure holding a glowing cube, and intelligence scores with cybercrime details.Brand logo with blue shapes and the word immersive above the text Learn More on black background.
Wizard Spider
87
2018
70
76
87
95
84