Threat Actor
Bfdf2
- First Reported
- Oct 16, 2026
- Latest Reported
- Oct 16, 2026
Reported Context (1)
- PwnForums account that posted the Saudi Arabia dataset with the same Session ID and matching typo found in posts by Moelester and RockHavks. The report treats these similarities as evidence of linked activity, without establishing a real-world identity. StealthMole Traces RockHavks’ Earlier Seller Accounts Across Underground Forums
Threat Actors (8)
Vendors (1)
Products (2)
Tools (3)
Industries (2)
Countries (17)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.