ALTDOS
ALTDOS is a threat actor group that has targeted entities in Southeast Asia, including Singapore, Thailand, and Malaysia. They have been involved in data breaches of companies in various sectors, such as real estate and retail, compromising sensitive information like customer names, bank account numbers, and transaction details. ALTDOS uses tactics like ransomware attacks, data exfiltration, and dumping data publicly or for sale on underground forums. The group has been known to demand ransom payments from victims, but also leaks data if demands are not met.
CVEs in recent coverage
No CVEs named alongside this actor in the last 90 days.
Recent victims
No leak-site posts on record for this group.
Recent activity
No posts or advisories have named this actor recently.
References
- https://www.databreaches.net/singapore-corporations-making-progress-in-preventing-cyberattacks/
- https://www.databreaches.net/altdos-claims-to-have-hacked-one-of-malaysias-biggest-conglomerates/
- https://www.databreaches.net/advisories-are-published-but-are-enough-entities-reading-them-and-taking-precautions/
- https://www.databreaches.net/singapore-real-estate-firm-breached-by-altdos/
- https://www.databreaches.net/sg-vhive-alerts-consumers-to-cyberattack/
- https://www.databreaches.net/sg-vhive-attackers-escalate-take-control-of-furniture-retailers-email-server/
From the MISP threat-actor galaxy, MITRE ATT&CK and RansomLook (CC BY 4.0). Activity is any post or advisory Watch Floor collected that names the actor or one of its aliases.