Poseidon Group
- ID
- G0033
- Source
- attack.mitre.org
- MITRE last modified
- 1 Aug 2026
Poseidon Group is a Portuguese-speaking threat group that has been active since at least 2005. The group has a history of using information exfiltrated from victims to blackmail victim companies into contracting the Poseidon Group as a security firm. [1]
Techniques used (8)
- T1003 OS Credential Dumping
- T1007 System Service Discovery
- T1036.005 Match Legitimate Resource Name or Location
- T1049 System Network Connections Discovery
- T1057 Process Discovery
- T1059.001 PowerShell
- T1087.001 Local Account
- T1087.002 Domain Account