"'AIG' Threat Group Launches With Unique Business Model"

The Atlas Intelligence Group (AIG), also known as Atlantis Cyber-Army, has recently emerged with what appears to be a different and potentially trend-setting cybercrime model. According to Cyberint's researchers, the threat actor sells various services via its main website, including access to stolen databases, exclusive data leaks, Distributed Denial-of-Service (DDoS) services, and initial access to enterprise networks through Remote Desktop Protocol (RDP) clients and Web shells. Cyberint's researchers discovered AIG in May and have seen it rapidly grow. What distinguishes the threat actor from others with similar offerings is that the operators appear to be entirely outsourcing the actual hacking activities to independent cyber-mercenaries with no direct connection to the operation. When a client purchases AIG's DDoS, data theft, or malicious spam services, for example, the group advertises for and hires independent contractors to carry out the actual tasks. This is in contrast to most threat groups, which recruit and retain the same team of hackers for multiple campaigns. AIG's model appears to be designed to ensure a high level of operational security for its leaders by isolating them from those engaged in criminal hacking activity. This article continues to discuss the business model and communications of AIG. 

Dark Reading reports "'AIG' Threat Group Launches With Unique Business Model"

Submitted by Anonymous on