HOMETHREATSThreat Actor 888
APT / THREAT GROUP

Threat Actor 888

1
aliases
Last seen:Mar 17, 2026

Intelligence Profile

Threat actor 888 is a hacker active in 2024, targeting companies for data breaches. They've hit Microsoft, BMW (Hong Kong), and others in tech, freight, and oil & gas industries

Threat Analysis

Threat Actor 888 is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://cybersecuritynews.com/threats-claimimg-breach/
→https://www.cloudways.com/blog/hacker-allegedly-leaks-data-from-shopify-breach-on-breachforums/
→https://twitter.com/H4ckManac/status/1810569160180515171
→https://medium.com/@DoingFedTime/80-000-records-exposed-in-shell-data-breach-by-threat-actor-888-64c407dfac94

Quick Facts

TypeAPT / Threat Group
Aliases1
SourceMalpedia

Also Known As

Threat Actor 888

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.
← All Threat Actors·Geopolitics Map·Search Threat Actor 888
Threat Actor 888 — APT / Threat Group | Threat Intelligence | CTIWATCH.COM