All actors

USDoD

Also reported as NetSec and ScarFace_TheOne. Linked to Spain by one source.

Reports
23
Last reported
Origin
Spain
ID
usdod
Merge evidence
2 alias matches

Reports per quarter

  1. 2009 Q2: 1 report
  2. 2009 Q3: no reports
  3. 2009 Q4: no reports
  4. 2010 Q1: no reports
  5. 2010 Q2: no reports
  6. 2010 Q3: no reports
  7. 2010 Q4: no reports
  8. 2011 Q1: no reports
  9. 2011 Q2: no reports
  10. 2011 Q3: no reports
  11. 2011 Q4: no reports
  12. 2012 Q1: no reports
  13. 2012 Q2: no reports
  14. 2012 Q3: no reports
  15. 2012 Q4: no reports
  16. 2013 Q1: no reports
  17. 2013 Q2: no reports
  18. 2013 Q3: no reports
  19. 2013 Q4: no reports
  20. 2014 Q1: no reports
  21. 2014 Q2: 1 report
  22. 2014 Q3: no reports
  23. 2014 Q4: no reports
  24. 2015 Q1: no reports
  25. 2015 Q2: no reports
  26. 2015 Q3: no reports
  27. 2015 Q4: no reports
  28. 2016 Q1: no reports
  29. 2016 Q2: no reports
  30. 2016 Q3: no reports
  31. 2016 Q4: no reports
  32. 2017 Q1: 1 report
  33. 2017 Q2: no reports
  34. 2017 Q3: no reports
  35. 2017 Q4: no reports
  36. 2018 Q1: no reports
  37. 2018 Q2: no reports
  38. 2018 Q3: no reports
  39. 2018 Q4: no reports
  40. 2019 Q1: no reports
  41. 2019 Q2: no reports
  42. 2019 Q3: no reports
  43. 2019 Q4: no reports
  44. 2020 Q1: no reports
  45. 2020 Q2: no reports
  46. 2020 Q3: no reports
  47. 2020 Q4: 2 reports
  48. 2021 Q1: no reports
  49. 2021 Q2: 1 report
  50. 2021 Q3: no reports
  51. 2021 Q4: no reports
  52. 2022 Q1: no reports
  53. 2022 Q2: no reports
  54. 2022 Q3: no reports
  55. 2022 Q4: no reports
  56. 2023 Q1: no reports
  57. 2023 Q2: no reports
  58. 2023 Q3: 3 reports
  59. 2023 Q4: no reports
  60. 2024 Q1: no reports
  61. 2024 Q2: 2 reports
  62. 2024 Q3: 2 reports
  63. 2024 Q4: no reports
  64. 2025 Q1: no reports
  65. 2025 Q2: 1 report
  66. 2025 Q3: no reports
  67. 2025 Q4: no reports
  68. 2026 Q1: 1 report
  69. 2026 Q2: 8 reports
Dated reports, 2009 Q2 to 2026 Q2.

Techniques seen in the last two years

Show all 45 techniques Show fewer

Counts come from technique IDs in the actor's report text.

Reports

Show all 23 reports Show fewer
  1. Cobaltstrike-Beacons analyzed

    date in the title fromORKL

  2. SUNBURST, TEARDROP and the NetSec New Normal

    date in the title fromORKL

  3. DECLAWING THE DRAGON

    file creation date fromORKL

Newest first. Details opens the report in Explore.