Introduction
DataSuckers is a financially motivated hacking group linked to major data breaches affecting businesses in Russia and Ukraine, with claims of having stolen 2-3 TB of data from approximately 68 million customers. The group has demonstrated TTPs such as customer data theft, extortion through ransom demands, and website defacement. They have claimed responsibility for high-profile attacks on ATB Market, Dodo Pizza, and Tez Tour, and reportedly obtained sensitive customer and employee information during these breaches. While DataSuckers maintains a Telegram channel for communications, its operations have drawn the attention of Russian authorities, resulting in the detention of several key members.
Activities and Tactics
Information pending cataloguing.
Notable Campaigns
Information pending cataloguing.
Tactics, Techniques, and Procedures (TTPs)
Information pending cataloguing.
Notable Indicators of Compromise (IOCs)
No curated IOCs are currently published for this actor. This section will be updated when stable, attributable indicators are available.
Malware and Tools
- Hacking Team UEFI Rootkit:
Attribution and Evidence
Information pending cataloguing.
References
References pending cataloguing.