Cataloged
IdentityTracking identifier: G0079
Reviewed identity mapping approved on this date.
DarkHydrus
Tracked as
G0079
DarkHydrus is a threat group that has targeted government agencies and educational institutions in the Middle East since at least 2016. The group heavily leverages open-source tools and custom payloads for carrying out attacks.
Activity timeline
A dated ledger of actor-claimed victims, campaigns, indicators, identity mappings, relationships, and CVE links. Each date states what it measures. For extensive leak-site histories, victim entries are limited to the 100 most recent distinct listings.
Identity and attribution
Exact names and tracking identifiers resolve to this canonical profile. Rebrands, affiliations, and overlapping clusters remain separate confidence-rated relationships.
Name map
DarkHydrusCanonical Name
G0079Tracking Id
Loading CVEs, techniques, indicators, malware, victims, and activity...