Apos is a data-broker extortion group emerging in April 2024, known for data theft and extortion without ransomware deployment.
Apos is a data-broker extortion group that emerged in April 2024, focusing solely on data exfiltration and threatening to leak or sell stolen information instead of deploying ransomware. They primarily target technology, healthcare, manufacturing, telecom, and government sectors across multiple countries. Their main TTPs involve data exfiltration and extortion via threatened disclosure; no specific tools are detailed in the provided data. Defenders should prioritize DLP strategies, network segmentation, and anomaly-based monitoring to detect unauthorized data transfers.
Apos is a data-broker extortion group that surfaced in April 2024, focusing on data exfiltration and threatening to publish or sell stolen information rather than encrypting files, targeting technology, healthcare, manufacturing, telecom, and government sectors across multiple countries.
No, Apos does not deploy ransomware. They are a data-broker extortion group that solely focuses on data exfiltration and threatening to leak or sell stolen information.
The Apos group primarily targets the technology, healthcare, manufacturing, telecom, and government sectors.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.