Desorden Group is a financially motivated cybercriminal group known for data theft and ransomware in the Asia-Pacific region.
Analyst brief
Desorden Group, a financially motivated cybercriminal group formerly known as ChaosCC, has built a strong reputation in hacking forums. They primarily target organizations in the Asia-Pacific region to steal and sell databases. Their key TTPs involve data exfiltration, ransomware demands, and selling stolen data on popular English-speaking forums. Defenders should focus on securing network perimeters and internet-facing databases, while consistently monitoring criminal forums for mentions of their organization's leaked data.
Desorden Group
unknown
Desorden (Disorder in Spanish, previously known as ChaosCC), is a financially motivated hacker group. The group first emerged under the new name Desorden in September 2021, on Raidforums. Today the group maintains users under that name on several popular English-speaking hacking forums, where they share their attacks and ransom demands, and offer databases for sale. The group gained an excellent reputation among the cybercriminal communities due to their successful operations and the unique data that they share and offer for sale.