Uptime Hamster: 106d 5h 13mDeploy: 23 Oct 2026 07:21Updated: 2026-07-21
Logo del actor de amenaza Void Balaur

Void Balaur

0 incidentes 0 paises 0 sectores apt RU Ultimo: -
Aliases: https: o www
Ver en IntelTracker → APTTrail →
Void Balaur is a financially motivated cybermercenary group that emerged in 2015, known for extensive cyber-espionage and data theft campaigns. The group, also operating under the alias Rockethack and previously Hacknet, advertises its services on Russian-language underground forums, where it has gained a reputation for reliably delivering requested information. Unlike traditional APT groups, Void Balaur operates as a hack-for-hire entity, selling stolen sensitive personal and financial data, as well as providing hacking services to a diverse clientele. Their unique offerings include the ability to obtain full email mailbox copies without user interaction, suggesting a high level of access potentially through compromised service providers or insider threats, which distinguishes them from many other threat actors. Trend Micro formally named the group Void Balaur in November 2021 after tracking their broader activities, initially observing overlaps in targeting with groups like APT28 but

Aliases del actor

https: o www

Actores similares

void-balauractor · 1Void Blizzardapt · 0Void Arachneapt · 0Void Rabisuapt · 0Void Manticoreapt · 0Void Bansheeapt · 0SHADOW-VOID-042apt · 0VoidCryptransomware · 0VOID MANTICOREthreat-actor · 0
Motivacion
Financial gain
Tecnicas MITRE
T1059.001, T1078, T1203, T1069, T1566, T1056.001
Tipo
apt
Pais origen
RU
Motivacion
Financial gain
Impacto
25
Actualizado
Sat, 01 Oc

Paises objetivo (OSINT)

United Arab EmiratesArmeniaAustraliaBelgiumBrazilBelarusCanadaCentral African RepublicGermanyEgypt

Sectores objetivo (OSINT)

Information ServicesFinanceHealthCare & Social AssistanceTelecommunicationsNational Security&International AffairsData Processing, Hosting, and Related Services