Threat actor · all actors
Poseidon GroupG0033 state
🇧🇷 BR
aka Poseidon Group, G0033
Last updated: 2026-08-20
About this actor
[Poseidon Group](https://attack.mitre.org/groups/G0033) is a Portuguese-speaking threat group that has been active since at least 2005. The group has a history of using information exfiltrated from victims to blackmail victim companies into contracting the [Poseidon Group](https://attack.mitre.org/groups/G0033) as a security firm. (Citation: Kaspersky Poseidon Group)
Source: MITRE ATT&CK
Names & naming systems
Each vendor coins its own name for the same actor. Where a name follows a known scheme we attribute it; the rest are listed honestly as unclassified.
MITRE ATT&CKG-number catalogue id
Unclassifiedno scheme matched
How we know this
- Data origin
- MITRE ATT&CK Imported from the MITRE ATT&CK STIX bundle as an intrusion-set object.
- Techniques
- MITRE ATT&CK STIX mappings — 11 ATT&CK techniques on file.
- Named victims
- None on file.
See how actor data is built for the full pipeline.
Activity timeline
No activity events recorded.
Profile
| CVE | Risk | CVSS | EPSS | Published | Products |
|---|---|---|---|---|---|
| No attributed CVEs. | |||||
T1003OS Credential Dumping ↗T1007System Service Discovery ↗T1036Masquerading ↗T1036.005Match Legitimate Resource Name or Location ↗T1049System Network Connections Discovery ↗T1057Process Discovery ↗T1059Command and Scripting Interpreter ↗T1059.001PowerShell ↗T1087Account Discovery ↗T1087.001Local Account ↗T1087.002Domain Account ↗
Mitigating controls (NIST 800-53)
| Control | Techniques covered | Coverage |
|---|---|---|
CM-6 | 8 / 11 | 73% |
SI-4 | 8 / 11 | 73% |
CM-7 | 7 / 11 | 64% |
AC-2 | 6 / 11 | 55% |
AC-3 | 5 / 11 | 45% |
AC-6 | 5 / 11 | 45% |
CM-2 | 5 / 11 | 45% |
SI-3 | 5 / 11 | 45% |
SI-7 | 5 / 11 | 45% |
CA-7 | 4 / 11 | 36% |
IA-9 | 4 / 11 | 36% |
SI-10 | 4 / 11 | 36% |
AC-5 | 3 / 11 | 27% |
CM-5 | 3 / 11 | 27% |
IA-2 | 3 / 11 | 27% |
Co-occurring actors
None.
Similar actors
Similar TTPs
- admin@338 0.32
- APT1 0.24
- Triton Safety Instrumented System Attack 0.21
- Operation CuckooBees 0.20
- Sowbug 0.20
Same category
- Night Dragon 1.00
- FunnyDream 1.00
- C0011 1.00
- Operation Wocao 1.00
- Operation Dream Job 1.00