Threat actor · G0115

GOLD SOUTHFIELD

Pinchy Spider

UnattributedNo public state or group attribution on record

GOLD SOUTHFIELD is a financially motivated threat group active since at least 2018 that operates the REvil Ransomware-as-a Service (RaaS). GOLD SOUTHFIELD provides backend infrastructure for affiliates recruited on underground forums to perpetrate high value deployments.

MITRE ATT&CK Techniques

T1027.010 T1059.001 T1113 T1133 T1190 T1195.002 T1199 T1219 T1566

Associated Malware

ConnectWiseREvil

Full MITRE ATT&CK profile

0 recent articles mention this actor

No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.