// UNCLASSIFIED // CLEARED FOR PUBLIC RELEASE //
FILE PUB-ENTDTG 0600Z
ColdRecon › Threat Groups › Cactus
Threat Group Dossier

Cactus

CLEARED FOR PUBLIC RELEASE · OPEN-SOURCE INTELLIGENCE
Cactus — 6 attributed incidents across our corpus.
Incidents on file6
First seen2023-01-01
Last seen2025-03-17
Top sectormanufacturing

Techniques observed (MITRE ATT&CK)

T1486 Data Encrypted for Impact (6)

Sectors targeted

manufacturing (1)industrial (1)Energy (1)automotive (1)semiconductor imaging sensors (1)digital imaging products manufacturer (1)

Attributed breaches

2025-03-17
ransomware
ASSA ABLOY
2024-02-20
ransomware
Schneider Electric
2024-01-29
ransomware
Schneider Electric
2024-01-16
ransomware
Asbury Automotive Group
2023-09-30
ransomware
OmniVision Technologies
2023-01-01
ransomware
OmniVision

Track this in real time.

ColdRecon watches the public signal so you don't have to — a daily brief and a live detection-coverage desk. Request clearance.

Request Clearance →