DeltaBoys have been operating since December 2021, initially starting out as database brokers and carders. However, in August 2022, their operation evolved into mass defacement and the ‘initial access’ broking market, providing webshells to sensitive websites. To fund their geopolitically motivated operations, they built a diverse catalogue of recently compromised databases, ‘zero-days’, ‘exploits to known vulnerabilities’, webshells, and leaked credit cards for sale.

Link to Research Report: https://www.cyfirma.com/outofband/deltaboys-black-hats-on-the-rise/

#Cybersecurity #CyberIntelligence #etlm #situationalawareness

https://www.cyfirma.com/