threat actor · Origin not attributed

888

On record in CyberSIXT · MISP Galaxy

Sources name this actor but link nothing to it yet: no CVE, technique or software is on record.

Threat actor 888 is a hacker active in 2024, targeting companies for data breaches. They've hit Microsoft, BMW (Hong Kong), and others in tech, freight, and oil & gas industries

Source: MISP Galaxy. MISP Galaxy threat-actor cluster, by the MISP Project (CC0 1.0).

Also known as: Threat Actor 888
Origin: Not attributed
On record in: CyberSIXT · MISP Galaxy

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: MITRE ATT&CK (© The MITRE Corporation, reproduced and distributed with its permission), the MISP Galaxy (CC0), and CyberSIXT's own coverage.