[threat-actors] Add Desorden Group

clusters/threat-actor.json

@@ -12715,6 +12715,25 @@
       },
       "uuid": "d7d270d2-b91f-4978-a9e9-76fa7f0d8f06",
       "value": "UNC2565"
+    },
+    {
+      "description": "Desorden (Disorder in Spanish, previously known as ChaosCC), is a financially motivated hacker group. The group first emerged under the new name Desorden in September 2021, on Raidforums. Today the group maintains users under that name on several popular English-speaking hacking forums, where they share their attacks and ransom demands, and offer databases for sale. The group gained an excellent reputation among the cybercriminal communities due to their successful operations and the unique data that they share and offer for sale.",
+      "meta": {
+        "refs": [
+          "https://www.databreaches.net/major-malaysian-water-utilities-company-hit-by-hackers-ranhill-offline-hackers-claim-databases-and-backups-deleted/",
+          "https://www.databreaches.net/one-month-later-ranhill-still-hasnt-fully-recovered-from-cyberattack/",
+          "https://www.databreaches.net/malaysian-online-stock-brokerage-firm-victim-of-cyberattack/",
+          "https://www.databreaches.net/johnson-fitness-and-wellness-hit-by-desorden-group/",
+          "https://www.databreaches.net/thailands-the-icon-group-hacked-by-desorden/",
+          "https://www.databreaches.net/customer-data-from-hundreds-of-indonesian-and-malaysian-restaurants-hacked-by-desorden/",
+          "https://www.databreaches.net/major-indonesia-tollroad-operator-hacked-by-desorden/",
+          "https://www.databreaches.net/recent-cyberattacks-put-thai-citizens-privacy-and-data-security-at-greater-risk/",
+          "https://www.databreaches.net/thai-entities-continue-to-fall-prey-to-cyberattacks-and-leaks/",
+          "https://seclists.org/dataloss/2021/q4/81"
+        ]
+      },
+      "uuid": "e89ebfcb-e7a3-4b2d-b0d7-399bb4904e27",
+      "value": "Desorden Group"
     }
   ],
   "version": 293