Skip to content
skopnix
Section B · Adversaries · Dossier
← Adversaries

File · Poseidon Group · Unknown · assessed origin Brazil · misp-galaxy + mitre-attack · refreshed 2026-10-06

Poseidon Group

  • G0033

MITRE G0033 ↗

Poseidon Group — ATT&CK rosePG

attack rose · 8 techniques across 4 tactics

Analyst brief

misp-galaxy + mitre-attack

Poseidon Group is a Portuguese-speaking threat group that has been active since at least 2005. The group has a history of using information exfiltrated from victims to blackmail victim companies into contracting the Poseidon Group as a security firm.

Kill chain

MITRE ATT&CK Enterprise · tap a technique

8 techniques · 4 of 15 tactics

  1. Execution

    1 technique

  2. Stealth

    1 technique

  3. Credential access

    1 technique

  4. Discovery

    5 techniques

select a technique

Primary-source reports

via APTnotes · linked, never re-hosted
  1. 2016Poseidon GroupKaspersky ↗

Take it with you

keyless · no signup

References

4 sources
  1. 1.securelist.com/poseidon-group-a-targeted-attack-boutique-specializing…
  2. 2.attack.mitre.org/wiki/Groups
  3. 3.attack.mitre.org/groups/G0033
  4. 4.attack.mitre.org/groups/G0033

Track Poseidon Group on the wire.

This dossier is already data: the keyless actor API and a STIX 2.1 bundle. Mentions on the wire reach Telegram and RSS as they land.

Follow on TelegramKEV RSSAPI

Check your stack

Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.

Stack checkNo key. No signup.