WeedSec is a threat actor targeting educational institutions with data leak operations via Telegram.
WeedSec is a threat actor group recently observed targeting the Moodle learning management platform. They primarily focus on educational institutions and workplaces, exfiltrating databases and leaking samples on their Telegram channel. Their main TTPs involve data leakage operations through public Telegram channels. Defenders should prioritize monitoring public Telegram channels for leaked data and strengthen monitoring for suspicious activities in Moodle instances.
WeedSec is a threat actor group that recently targeted the online learning and course management platform Moodle. They posted sample databases of Moodle on their Telegram channel, which is widely used by educational institutions and workplaces.
The WeedSec group primarily targets the Moodle learning management platform.
Their main TTP involves leaking data on their Telegram channel.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.