FlagThis
← Threat Actors / Global / Hive0163
DOSSIER // HIVE0163

Hive0163

ACTIVE CAMPAIGN TRACKED ⚠ Critical Threat
Primary Aliases: No secondary vendor aliases recorded.
Sponsor / State Affiliation Independent / Not Attributed
Primary Motivation Financial extortion through large-scale data exfiltration and ransomware encryption.
Active Timeline Unknown – Present
Confidence Rating 90% (Grounded)

Slopoly/Interlock Ransomware Campaign, Cisco FMC Zero-Day Exploitation

📥 Export ATT&CK Layer (.json) 🔔 RSS Feed 🏛️ CISA Advisories ↗

⚔️ Weaponized CVE Matrix (1)

CVE-2026-20131
Weaponized Vulnerability
CVSS 8.5 KEV EPSS 85.0%

🎯 Target Sectors & Focus

Healthcare Education Government Critical Infrastructure Financial Services

🛡️ MITRE ATT&CK® Attack Lifecycle (9 TTPs)

📥 Download Navigator JSON

📰 Verified Campaigns & Intelligence Archive

🔔 Subscribe to Alerts
No recent breaking campaign alerts recorded in the FlagThis threat database.
Copied to clipboard
LINK COPIED TO CLIPBOARD