Threat actor · G1021

Cinnamon Tempest

DEV-0401Emperor DragonflyBRONZE STARLIGHT

UnattributedNo public state or group attribution on record

Cinnamon Tempest is a China-based threat group that has been active since at least 2021 deploying multiple strains of ransomware based on the leaked Babuk source code. Cinnamon Tempest does not operate their ransomware on an affiliate model or purchase access but appears to act independently in all stages of the attack lifecycle.

MITRE ATT&CK Techniques

T1021.002 T1047 T1059.001 T1059.003 T1059.006 T1078 T1078.002 T1080 T1090 T1105 T1140 T1190 T1484.001 T1543.003 T1567.002 T1572 T1574.001 T1588.002 T1657

Associated Malware

CheerscryptCobalt StrikeHUI LoaderImpacketPandoraPlugXRcloneSliver

Full MITRE ATT&CK profile

0 recent articles mention this actor

No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.