Threat actor

TAG-140

In 2 briefs, most recently 8 July 2025. RSS for this tag

Learn more: Malpedia ↗ ThreatFox ↗ MalwareBazaar ↗

Coverage in DanSec Daily

  1. Ingram Micro ransomware outage, Qantas extortion over 6 million customer records, and a $140M theft from six Brazilian banks.
  2. TAG-140 hits Indian government and rail with modified DRAT V2; Caracal eBPF rootkit released; SSH/Telnet brute-force usernames evolve.