48
Sophistication
2018
First Seen
50
Notoriety
53
Stealth
63
Immersive Rating
66
Impact
68
Tactics Variety
Hooded skeletal figure with glowing eyes and tattered cloak surrounded by floating dark smoke and shards.

SocGhoulish

North Korean Malware delivery group using fake browser updates to distribute info-stealers and loaders. Works with ransomware affiliates for initial access. Common on compromised websites and malvertising.

Key behaviours to watch:

Immersive coverage includes:

Dark Caracal intelligence card with cat in hat and trench coat holding a USB, describing a Lebanese APT group.Brand logo with blue shapes and the word immersive above the text Learn More on black background.
Dark Caracal
68
2020
54
57
65
71
52
DarkSide ransomware group with horned black-armored figures under red swirling sky, known for 2021 Colonial Pipeline attack.Brand logo with blue shapes and the word immersive above the text Learn More on black background.
DarkSide
92
2007
90
86
88
87
84
Digital card titled Dark Storm showing a figure under a glowing purple storm cloud with blue lightning.Brand logo with blue shapes and the word immersive above the text Learn More on black background.
Dark Storm
80
2020
75
76
78
85
70
Stylized bear in a suit, top hat, and monocle holding a cane and glass, labeled Fancy Bear cyber unit.Brand logo with blue shapes and the word immersive above the text Learn More on black background.
Fancy Bear
71
2017
63
64
68
65
65
FIN7 character with spider head in suit extending hand, stats on right, and intel about cybercrime group below.Brand logo with blue shapes and the word immersive above the text Learn More on black background.
FIN7
85
2021
81
75
89
91
80
Fox Kitten intel card shows a hooded feline figure with cyber elements, plus stats and APT description.Brand logo with blue shapes and the word immersive above the text Learn More on black background.
Fox Kitten
53
2022
47
49
59
61
61
Hafnium: Chinese group behind 2021 Microsoft Exchange exploits allowing stealthy mass email access.Brand logo with blue shapes and the word immersive above the text Learn More on black background.
HAFNIUM
70
2022
69
62
73
76
60
Card for Indian Cyber Force showing a hooded figure, group stats, and description of nationalist hacktivist actions.Brand logo with blue shapes and the word immersive above the text Learn More on black background.
Indian Cyber Force
80
2013
73
72
72
85
75