Appin Security Group
Appin Security Group is an India-attributed cybercrime syndicate with a financial motive, tracked by Brandefense. It targets the Media and Entertainment, and Civil Society and NGOs sectors. It uses 13 MITRE ATT&CK techniques.
Also known as
- Operation Hangover actor
- Origin
- India
- Techniques
- 13
- Exploited CVEs
- No CVE data
- First seen
- Aug 3, 2016
- Last seen
- Aug 3, 2016
- Record updated
Who They Target.
How They Operate · MITRE ATT&CK.
13 techniques across 6 of 14 tacticsReconnaissance·
Resource Development·
Execution3
T1055.012
Process Injection: Process Hollowing
Process Injection: Process Hollowing
T1059
Command and Scripting Interpreter
Command and Scripting Interpreter
T1105
Ingress Tool Transfer
Ingress Tool Transfer
Persistence·
Privilege Escalation·
Defense Evasion4
T1027
Obfuscated Files or Information
Obfuscated Files or Information
T1036.005
Masquerading: Match Legitimate Resource Name or Location
Masquerading: Match Legitimate Resource Name or Location
T1497.001
Virtualization/Sandbox Evasion: System Checks
Virtualization/Sandbox Evasion: System Checks
T1498
Network Denial of Service
Network Denial of Service
Credential Access1
T1056.001
Input Capture: Keylogging
Input Capture: Keylogging
Discovery1
T1125
Video Capture
Video Capture
Lateral Movement·
Command and Control·
Exfiltration·
Impact·
Indicators Of Compromise.
TLP:AMBER13 indicators on the Brandefense platform
IP, domain and hash indicators · YARA rules · ATT&CK Navigator export
Request A DemoAbout Appin Security Group.
An Indian offensive cyber capability contractor hired to perform targeted operations and cyber espionage across multiple campaigns.
Last updated Oct 19, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.