From 34e03e6b5680d640d6d65bf522e118fbd7a431b7 Mon Sep 17 00:00:00 2001
From: Mathieu4141 <mathieu@feedly.com>
Date: Tue, 7 Nov 2023 10:37:08 -0800
Subject: [PATCH] [threat-actors] Add Desorden Group

---
 clusters/threat-actor.json | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index a9b4333b..b45dae3a 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -12715,6 +12715,25 @@
       },
       "uuid": "d7d270d2-b91f-4978-a9e9-76fa7f0d8f06",
       "value": "UNC2565"
+    },
+    {
+      "description": "Desorden (Disorder in Spanish, previously known as ChaosCC), is a financially motivated hacker group. The group first emerged under the new name Desorden in September 2021, on Raidforums. Today the group maintains users under that name on several popular English-speaking hacking forums, where they share their attacks and ransom demands, and offer databases for sale. The group gained an excellent reputation among the cybercriminal communities due to their successful operations and the unique data that they share and offer for sale.",
+      "meta": {
+        "refs": [
+          "https://www.databreaches.net/major-malaysian-water-utilities-company-hit-by-hackers-ranhill-offline-hackers-claim-databases-and-backups-deleted/",
+          "https://www.databreaches.net/one-month-later-ranhill-still-hasnt-fully-recovered-from-cyberattack/",
+          "https://www.databreaches.net/malaysian-online-stock-brokerage-firm-victim-of-cyberattack/",
+          "https://www.databreaches.net/johnson-fitness-and-wellness-hit-by-desorden-group/",
+          "https://www.databreaches.net/thailands-the-icon-group-hacked-by-desorden/",
+          "https://www.databreaches.net/customer-data-from-hundreds-of-indonesian-and-malaysian-restaurants-hacked-by-desorden/",
+          "https://www.databreaches.net/major-indonesia-tollroad-operator-hacked-by-desorden/",
+          "https://www.databreaches.net/recent-cyberattacks-put-thai-citizens-privacy-and-data-security-at-greater-risk/",
+          "https://www.databreaches.net/thai-entities-continue-to-fall-prey-to-cyberattacks-and-leaks/",
+          "https://seclists.org/dataloss/2021/q4/81"
+        ]
+      },
+      "uuid": "e89ebfcb-e7a3-4b2d-b0d7-399bb4904e27",
+      "value": "Desorden Group"
     }
   ],
   "version": 293