FlagThis

← All Threat Actors
Threat Actor Profile

Infrastructure Destruction Squad

Dark Engine
▲ High Threat
Venice San Marco Flood Control Intrusion, BLACKNET-00 Ransomware Release, WordPress SEO Poisoning & Fake CAPTCHA Campaign
Origin Russia
Sponsor unknown (attributed to Russia-nexus hacktivist/criminal hybrid)
Motivation hybrid: geopolitical hacktivism and financial gain

Target Sectors

Industrial Control Systems (ICS) Operational Technology (OT) Water Management Systems Metallurgy Food Processing Smart Building Automation Defense Industrial Base

Known TTPs

Human-Machine Interface (HMI) exploitation
Ransomware (BLACKNET-00, EXTERMINATOR)
Malware-as-a-Service (MaaS)
SEO Poisoning for credential harvesting
Access sales
AI-generated custom tooling
Fake CAPTCHA phishing

External Resources

CISA Advisories ↗

Related Intelligence

Hacking the mainframe…
LINK COPIED TO CLIPBOARD