Poseidon Group

G0033BR0 reports from 0 vendors

Poseidon Group is a Portuguese-speaking threat group that has been active since at least 2005. The group has a history of using information exfiltrated from victims to blackmail victim companies into contracting the Poseidon Group as a security firm.

Vendor aliases (1)

The same group is tracked under different names by different vendors.

Vendor	Name
OSINT	G0033

MITRE ATT&CK techniques (8)

T1003 T1007 T1036.005 T1049 T1057 T1059.001 T1087.001 T1087.002

Indicators of compromise

No IOCs extracted yet from reports naming this actor.

Report timeline

Every report in the Global Intel Library that names Poseidon Group, newest first. Open any report to see the full analysis with provenance.

No reports in the Lore library name this actor yet.

Threat feed IOCs (0)

Indicators from free threat feeds (abuse.ch ThreatFox, AlienVault OTX) attributed to Poseidon Group. Each row shows why it was linked and where it came from.

No feed indicators linked to this actor yet. Feeds are checked every hour.

Public research & publications (4)

Open-source reports about this actor collected from MISP Galaxy and MITRE ATT&CK.

attack.mitre.orghttps://attack.mitre.org/groups/G0033
securelist.comhttps://securelist.com/poseidon-group-a-targeted-attack-boutique-specializing-in-global-cyber-espionage/73673/
attack.mitre.orghttps://attack.mitre.org/wiki/Groups
attack.mitre.orghttps://attack.mitre.org/groups/G0033/