grelos

aliases

Last seen:Mar 17, 2026

Intelligence Profile

grelos is a skimmer used for magecart-style attacks.

Threat Analysis

grelos is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://community.riskiq.com/article/8c4b4a7a

→https://gist.github.com/krautface/2c017f220f2a24141bdeb70f76e7e745

→https://www.riskiq.com/blog/labs/magecart-medialand/

Quick Facts

TypeAPT / Threat Group

Aliases2

Also Known As

js.grelosgrelos

External Intelligence

Malpedia: js.grelos

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search grelos