All actors

Void Balaur

Also reported as Rockethack.

Reports
6
Last reported
Known CVEs
27
ID
void-balaur
Merge evidence
2 alias matches

Reports per quarter

  1. 2021 Q4: 2 reports
  2. 2022 Q1: 1 report
  3. 2022 Q2: no reports
  4. 2022 Q3: 2 reports
  5. 2022 Q4: no reports
  6. 2023 Q1: no reports
  7. 2023 Q2: no reports
  8. 2023 Q3: no reports
  9. 2023 Q4: no reports
  10. 2024 Q1: no reports
  11. 2024 Q2: no reports
  12. 2024 Q3: no reports
  13. 2024 Q4: no reports
  14. 2025 Q1: no reports
  15. 2025 Q2: no reports
  16. 2025 Q3: no reports
  17. 2025 Q4: no reports
  18. 2026 Q1: no reports
  19. 2026 Q2: 1 report
Dated reports, 2021 Q4 to 2026 Q2.

CVEs named in reports

Show all 27 CVEs Show fewer

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

  1. Void Balaur: Tracking a Cybermercenary’s Activities

    Malpedia library date Trend Micro fromORKLCCS '25 data

Newest first. Details opens the report in Explore.