Threat Actor
UsDoD
- First Reported
- May 16, 2024
- Latest Reported
- Jul 24, 2025
Reported Context (3)
- Claimed to have obtained CrowdStrike’s IoC list and posted some of the records on BreachForum. What Indicators of Compromise Are and How Organizations Use Them
- Threat actor who shared stolen data on BreachForums and claimed responsibility for or involvement in multiple breaches; reportedly arrested in Brazil, though the article notes community members disputed whether the identified suspect was USDoD. Brazil Arrests Suspect in Case Tied to USDoD’s Alleged Hacks
- Threat actor who posted on the seized BreachForums and announced plans to launch a separate site called Breach Nation. BreachForums Returns After FBI Seizure as Users Speculate About Law-Enforcement Honeypot
Malware (1)
People (2)
Threat Actors (4)
Products (7)
Industries (3)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.