Poseidon Group
Poseidon Group is a Portuguese-speaking threat group that has been active since at least 2005. The group has a history of using information exfiltrated from victims to blackmail victim companies into contracting the Poseidon Group as a security firm.
Properties
- Last source
- MITRE ATT&CK
- STIX ID
- intrusion-set--7ecc3b4f-5cdb-457e-b55a-df376b359446
- In Signal since
- initial import (Sep 2026)
- Retrieved at
- 2026-11-02T12:53:29+00:00
- Type
- intrusion-set
MITRE ATT&CK Techniques (8)
Adversaries may attempt to get a listing of domain accounts. This information can help adversaries determine which domain accounts exist to aid in fol
Adversaries may attempt to get a listing of local system accounts. This information can help adversaries determine which local accounts exist on a sys
Adversaries may match or approximate the name or location of legitimate files, Registry keys, or other resources when naming/placing them. This is don
Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password.
Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environ
Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common
Adversaries may attempt to get a listing of network connections to or from the compromised system they are currently accessing or from remote systems
Adversaries may try to gather information about registered local system services. Adversaries may obtain information about services using tools as wel
Explore this actor's full graph with Ninja Signal