Kinsing
Aliases: Money Libra
- First seen
- 2022-01-01 00:00:00
- Primary motivation
- financial-gain
- Sophistication
- intermediate
- Resource level
- organization
- Actor type
- criminal
- Profile updated
- 2026-07-07 12:02:06
Targeted industries: financial-services technology-and-telecommunications retail-and-hospitality
Context
This group started operating during the first quarter of 2022. They published samples of alleged stolen data from companies on their site on Tor. It is unclear if they conducted the attacks themselves, or if they bought leaked databases from third parties.
Reports & references
- Trend Micro — Analysis Of Kinsing Malwares Use Of Rootkit (report)
- blog.aquasec.com — Threat Alert Kinsing Malware Container Vulnerability (report)
- sysdig.com — Zoom Into Kinsing Kdevtmpfsi (report)
- Palo Alto Unit 42 — Moneylibra (report)