SYMBOLCOMMON_NAMEaka. SYNONYMS

Kinsing  (Back to overview)

aka: Money Libra

This group started operating during the first quarter of 2022. They published samples of alleged stolen data from companies on their site on Tor. It is unclear if they conducted the attacks themselves, or if they bought leaked databases from third parties.


Associated Families

There are currently no families associated with this actor.


References
2022-07-18Palo Alto Networks Unit 42Unit 42
Money Libra
Kinsing Kinsing
2020-11-24Trend MicroDavid Fiser, Jaromír Hořejší
Analysis of Kinsing Malware's Use of Rootkit
Kinsing Kinsing
2020-11-23sysdigKaizhe Huang
Zoom into Kinsing
Kinsing Kinsing
2020-04-03AquaGal Singer
Kinsing Malware Attacks Targeting Container Environments
Kinsing Kinsing

Credits: MISP Project