Industrial Spy

Threat Actor

Industrial Spy is a hacking group that runs an extortion marketplace (Tor extortion) where they sell data stolen from compromised organizations. They are known to use ransomware in their attacks.

Industrial Spy is trying to build a brand for itself as a source of illicit trade secrets for unscrupulous businesspeople around the world. It is designed for non-technical darknet users and makes itself widely available to people who may not be experienced using darknet technologies.

Incidents Associated with this Threat

February 25, 2022: Novartis claims no sensitive data breach in latest cyberattack by Industrial Spy.

Malware Used by this Threat Actor

No malware identified for this threat actor.