Threat Profiling: CarthageRocket

Executive Summary CarthageRocket is a professional access broker and credential theft specialist, with a reputation for targeting employee credentials using techniques such as phishing, credential stuffing, and brute-force attacks. Known for selling compromised databases on underground forums, CarthageRocket has gained prominence through their affiliation with the Lapsus$ group, which has expanded the scale and impact of their operations. This post examines their operations, tactics, and affiliations to shed light on the risks posed by this threat actor. [Read More]