Threat Profiling: CarthageRocket
Executive Summary CarthageRocket is a professional access broker and credential theft specialist, with a reputation for targeting employee credentials using techniques such as phishing, credential stuffing, and brute-force attacks. Known for selling compromised databases on underground forums, CarthageRocket has gained prominence through their affiliation with the Lapsus$ group, which has expanded the scale and impact of their operations.
This post examines their operations, tactics, and affiliations to shed light on the risks posed by this threat actor.
[Read More]