Skip to content
brandefense.io
Request A Demo
CybercrimeFinancial

Hagga

Hagga is a cybercrime syndicate with a financial motive, tracked by Brandefense. It targets 9 sectors, including Government and Technology, in 23 countries, including the United States and the United Kingdom.

Also known as
  • Aggah
  • TH-157
  • Operation “Roma225”
  • Operation “Red Deer”
Request IOC feedRequest ATT&CK export
Techniques
0
Exploited CVEs
No CVE data
First seen
Jan 1, 2018
Record updated

Who They Target.

Sectors · 9
Countries · 23

About Hagga.

Hagga is believed to have been using Agent Tesla, 2021’s sixth most prevalent malware, to steal sensitive information from his victims since the latter part of 2021.

Last updated Sep 11, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.