Kinsing (Money Libra) has been active since 2022, primarily known for leaking company data.
Kinsing (Money Libra) has been active since early 2022, but it is unclear whether they conduct attacks themselves. The group primarily publishes alleged stolen company data on their Tor-based site, possibly relying on third-party leaked databases. Their TTPs are unknown, but they focus on data leak operations. Defenders should increase monitoring for third-party database leaks and potential data exposure.
This group started operating during the first quarter of 2022. They published samples of alleged stolen data from companies on their site on Tor. It is unclear if they conducted the attacks themselves, or if they bought leaked databases from third parties.
This group started operating during the first quarter of 2022.
They published samples of alleged stolen data from companies on their site on Tor.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.