Skip to content
CybercrimeFinancialIntermediate sophistication

Xorcat

Xorcat is a cybercrime syndicate with a financial motive, tracked by Brandefense. It uses 7 MITRE ATT&CK techniques and exploits 2 known CVEs.

Techniques
7
Exploited CVEs
2
Record updated

About Xorcat.

Threat actor operating under the pseudonym xorcat, who claimed responsibility for leaking a database allegedly belonging to the Australian graphic design platform Canva.

Last updated Jul 28, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.