APT / THREAT GROUP✊ HACKTIVISM
Honeybee
2
aliases
Last seen:Mar 17, 2026
Intelligence Profile
[Honeybee](https://attack.mitre.org/groups/G0072) is a campaign led by an unknown actor that targets humanitarian aid organizations and has been active in Vietnam, Singapore, Argentina, Japan, Indonesia, and Canada. It has been an active operation since August of 2017 and as recently as February 2018. (Citation: McAfee Honeybee)
Threat Analysis
Honeybee is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of hacktivism.
As a hacktivist-aligned entity, Honeybee conducts operations driven by ideological, political, or social grievances, typically through website defacements, DDoS attacks, and the leaking of sensitive data to advance a public narrative.
External References
Quick Facts
TypeAPT / Threat Group
Motivation✊ hacktivism
Aliases2
SourceMalpedia
Also Known As
G0072Honeybee
Research Links
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.