Poseidon Group

Linked to Brazil by three sources.

Reports: 7
Last reported: 6 April 2026
Techniques in ATT&CK: 8
Origin: Brazil

ID: G0033
Sources: ATT&CK MISP ETDA Malpedia
Merge evidence: 5 alias matches

Reports per quarter

2012 Q4: 1 report
2013 Q1: no reports
2013 Q2: no reports
2013 Q3: no reports
2013 Q4: no reports
2014 Q1: no reports
2014 Q2: no reports
2014 Q3: no reports
2014 Q4: no reports
2015 Q1: no reports
2015 Q2: no reports
2015 Q3: no reports
2015 Q4: no reports
2016 Q1: 5 reports
2016 Q2: no reports
2016 Q3: no reports
2016 Q4: no reports
2017 Q1: no reports
2017 Q2: no reports
2017 Q3: no reports
2017 Q4: no reports
2018 Q1: no reports
2018 Q2: no reports
2018 Q3: no reports
2018 Q4: no reports
2019 Q1: no reports
2019 Q2: no reports
2019 Q3: no reports
2019 Q4: no reports
2020 Q1: no reports
2020 Q2: no reports
2020 Q3: no reports
2020 Q4: no reports
2021 Q1: no reports
2021 Q2: no reports
2021 Q3: no reports
2021 Q4: no reports
2022 Q1: no reports
2022 Q2: no reports
2022 Q3: no reports
2022 Q4: no reports
2023 Q1: no reports
2023 Q2: no reports
2023 Q3: no reports
2023 Q4: no reports
2024 Q1: no reports
2024 Q2: no reports
2024 Q3: no reports
2024 Q4: no reports
2025 Q1: no reports
2025 Q2: no reports
2025 Q3: no reports
2025 Q4: no reports
2026 Q1: no reports
2026 Q2: 1 report

Dated reports, 2012 Q4 to 2026 Q2.

Techniques in ATT&CK

Listed by ATT&CK

No report from the last two years names a technique ID.

Reports

6 April 2026

Poseidon Group - Threat Group Cards: A Threat Actor Encyclopedia

date ORKL added it fromORKL

The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Poseidon Group - Threat Group Cards: A Threat Actor Encyclopedia
18 February 2016

Poseidon Group

file creation date Kaspersky fromORKL

The link to Mirror on Box failed its last check. Mirror on Box Detailsfor Poseidon Group
15 February 2016

A Touch of Artistry: Poseidon’s APT Boutique | Blog on Kaspersky Lab business

file creation date fromORKL

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor A Touch of Artistry: Poseidon’s APT Boutique | Blog on Kaspersky Lab business
9 February 2016

Poseidon Group: a Targeted Attack Boutique specializing in global cyber-espionage - Securelist

date in the CCS '25 data Kaspersky fromORKLCCS '25 data

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Poseidon Group: a Targeted Attack Boutique specializing in global cyber-espionage - Securelist
9 February 2016

Poseidon Group- a Targeted Attack Boutique specializing in global cyber-espionage

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Poseidon Group- a Targeted Attack Boutique specializing in global cyber-espionage
9 February 2016

Poseidon Group: a Targeted Attack Boutique specializing in global cyber-espionage

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Poseidon Group: a Targeted Attack Boutique specializing in global cyber-espionage
7 December 2012

Nov 2012 - Backdoor.W32.Makadocs Sample

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Nov 2012 - Backdoor.W32.Makadocs Sample

Newest first. Details opens the report in Explore.