DXQRTXX
DXQRTXX is a cybercrime syndicate with a financial motive, tracked by Brandefense. It targets the Government sector in France.
- Techniques
- 0
- Exploited CVEs
- No CVE data
- First seen
- Jul 24, 2024
- Last seen
- Aug 20, 2026
- Record updated
Who They Target.
About DXQRTXX.
DXQRTXX is a hacktivist group publicly documented since July 2024 and later operating through Telegram and in a declared alliance with another criminal crew. Its activity combines politically framed targeting of Western and NATO-aligned countries with financially motivated credential theft, data extortion, cryptocurrency-theft attempts, and opportunistic abuse of exposed secrets and misconfigured services. Public reporting ties the joint 2026 operation to automated reconnaissance and custom command-and-control tooling, but does not establish that DXQRTXX alone controlled every tool, victim operation, or member account.
Last updated Oct 9, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.