What other aliases and vendor names is Vanilla Tempest known by?

Vanilla Tempest is tracked across the cybersecurity industry by multiple aliases, including: DEV-0832, Vice Society, VICE SPIDER.

What are the primary motivations and sponsors of Vanilla Tempest?

Vanilla Tempest operates from Unknown with primary motivation categorized as Financial gain via data extortion, sponsored or affiliated with State-sponsored / Independent.

Vanilla Tempest

ACTIVE CAMPAIGN TRACKED ▲ High Threat

Primary Aliases: DEV-0832 VICE SPIDER Vice Society

Primary Motivation Financial gain via data extortion

Confidence Rating 85% (Grounded)

APAC Regional Extortion Campaign

🎯 Target Sectors & Focus

Healthcare Government Critical Infrastructure Manufacturing Financial Services

🛡️ MITRE ATT&CK® Attack Lifecycle (7 TTPs)

📥 Download Navigator JSON

Initial Access 1

T1566 Exploitation of Public-Facing Applications

↗

Execution 1

T1059 Living-off-the-Land (LotL)

↗

Credential Access & Discovery 1

T1003 Credential Access

↗

Lateral Movement & Collection 1

T1021 Remote Desktop Protocol (RDP) Exploitation

↗

Command & Control 1

T1071 Data Exfiltration

↗

Operational Techniques 2

T1000 Cobalt Strike Deployment

↗

T1000 Vulnerability Exploitation (Edge Devices)

↗

Copied to clipboard

LINK COPIED TO CLIPBOARD

Vanilla Tempest

🎯 Target Sectors & Focus

🛡️ MITRE ATT&CK® Attack Lifecycle (7 TTPs)

SHARE INTELLIGENCE WIRE