Uptime Hamster: 113d 10h 54mDeploy: 23 Oct 2026 07:21Updated: 2026-07-21
Logo del actor de amenaza DarkCasino

DarkCasino

0 incidentes 0 paises 0 sectores apt UNKNOWN Ultimo: -
Ver en IntelTracker → APTTrail →
DarkCasino is an economically motivated advanced persistent threat (APT) group that emerged in 2021, initially exhibiting attack patterns that shared similarities with the Evilnum group but has since developed its own distinct multi-level loading patterns and proprietary malware. This group is specifically driven by financial gain, focusing its efforts on stealing online property and credentials from various online trading platforms and financial entities. What distinguishes DarkCasino is its consistent integration of emerging attack technologies, its rapid exploitation of zero-day vulnerabilities, and its observed pivot towards utilizing artificial intelligence and machine learning to refine phishing campaigns, alongside a growing adoption of ransomware for direct victim extortion.
Motivacion
Financial gain
Tecnicas MITRE
T1027, T1071.001, T1140, T1078, T1105 - Ingress Tool Transfer, T1056
CVEs relacionadas
CVE-2024-38213, CVE-2024-21412, CVE-2023-38831
Tipo
apt
Pais origen
UNKNOWN
Motivacion
Financial gain
Impacto
44
Actualizado
Sat, 18 No

Paises objetivo (OSINT)

ArmeniaCanadaSwitzerlandCyprusSpainFranceIrelandMaltaPhilippinesPoland

Sectores objetivo (OSINT)

FinanceComputer Systems Design and Related Services