Threat Actor Profiles

Anubis

1 briefing · first covered 4/18/2026 · last covered 4/18/2026

Indicators of Compromise

Subscribe to unlock this actor's full IOC list

Free subscribers unlock full IOC lists, Sigma detection rules, remediation steps, and every daily briefing.

Attribution & Known Techniques

Matched to anubis in MISP's open threat-intelligence galaxy (ransomware cluster).

No technique-level data in the matched source for this actor.

Coverage Timeline

Not yet tracked for this actor

  • CrowdStrike Falcon / SentinelOne Deep Visibility-specific query syntax — hunting queries above (if any) are Microsoft Defender/Sentinel KQL
  • File transfer and exfiltration services used
  • Hunting queries — no FalconFriday rule matched this actor's known techniques