Mosad
Mosad is a cybercrime syndicate with a financial motive, tracked by Brandefense. It targets 4 sectors, including Government and Healthcare, in 8 countries, including the United States and China. It uses 10 MITRE ATT&CK techniques.
- Techniques
- 10
- Exploited CVEs
- No CVE data
- First seen
- Apr 25, 2026
- Last seen
- Aug 3, 2026
- Record updated
Who They Target.
About Mosad.
mosad is an underground threat actor observed advertising, selling, and leaking allegedly compromised databases, confidential documents, and access credentials. The actor's activities primarily target government, military, defense, intelligence, aerospace, energy, and other critical sectors across multiple countries. Observed activity indicates a broad geographic focus, with both publicly released leaks and commercially offered data or access. The actor's identity, geographic origin, and the authenticity of all claimed data remain unverified.The actor is not believed to be associated with the Israeli intelligence agency Mossad; the name “mosad” refers solely to the observed online alias.
Last updated Aug 28, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.