Threat Actor
GOLD OGRE
- First Reported
- Oct 29, 2026
- Latest Reported
- Oct 30, 2026
Reported Context (2)
- Sophos said the group behind Aur0ra ransomware used AI agents orchestrated through Cursor for network discovery, credential attacks, and lateral movement. Security Roundup Covers Anthropic Intrusion Dispute, UEFI Flaw and Cloudflare AI Data Leak
- Sophos identifies GOLD OGRE as the cybercriminal group operating Aur0ra ransomware. CTU researchers assess with high confidence that the group used AI to test tool and technique evasion and provided associates with similar technology for ransomware operations. Sophos Details AI-Assisted Aur0ra Ransomware Operations
CVE (1)
Malware (1)
People (2)
MITRE ATT&CK (14)
Vendors (8)
Products (12)
Tools (13)
Industries (2)
Countries (6)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.