DriftingCloud is a persistent threat actor known for targeting various industries and locations. They are skilled at developing or acquiring zero-day exploits to gain unauthorized access to target networks. Compromising gateway devices is a common tactic used by DriftingCloud, making network monitoring solutions crucial for detecting their attacks.
Alternate Group Names
6f6b187b-971b-4df9-a7ef-9b3fd7e092f7, DriftingCloud,