Skip to content
CybercrimeFinancialAdvanced sophistication

DriveSurge

DriveSurge is a cybercrime syndicate with a financial motive, tracked by Brandefense. It uses 4 MITRE ATT&CK techniques.

Techniques
4
Exploited CVEs
No CVE data
Record updated

About DriveSurge.

A threat actor orchestrating a large-scale malware distribution operation, primarily functioning as an initial access broker (IAB) utilizing a pay-per-install (PPI) model to facilitate follow-on attacks by other cybercriminal groups.

Last updated Jul 6, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.