CikLeakThreat actor
CikLeak is a threat actor that claims to have accessed systems of Russia’s Central Election Commission and companies involved in the Vybory platform, which administers elections. The group asserts that its objective is to expose internal workings of the Russian electoral system and potential manipulation opportunities, rather than disrupt voting.From MISP Galaxy
Last reported 1 month ago, by Risky Business News1 report
ATT&CK techniques
3 techniques · each with the sentence it comes from- T1204.003Malicious Image
“The vulnerabilities allow attackers to use malicious image files to run malicious code on remote services.”
- T1552.004Private Keys
“The modules loaded malicious code that extracted and stole crypto-wallet private keys.”
- T1684Social Engineering
“Rust warns of ongoing social engineering campaign: The Rust programming language warns that a threat actor is targeting its core members and owners of popular libraries.”
Reports per month
last 12 monthsOctober so far (hatched). Counted by report, not by story.
What the reports say
1 report, newest first · the exact sentence from each-
Risky Bulletin: Gemini hacked three companies too“Hackers claim hack of Russia's election commission: A new hacking group named CikLeak claims to have breached and stolen data from Russia's election commission and some of its contractors.”
Indicators in its reports
named in the reports above- itorrents[.]orgin 1 report
- onionmail[.]comin 1 report
- marktsec.bsky[.]socialin 1 report
- sethmlarson[.]devin 1 report
- shakirov2036.bsky[.]socialin 1 report
- pwn[.]aiin 1 report
Copy these 6 indicators · defanged
Thanks — we review every report.