Bandidos

Profile narrative

The threat actor known as Bandidos, also referred to as the Bandidos Revolution Team, operates under these aliases. These names appear in limited open-source references. No other names or variations have been documented in publicly available sources.

Open-source reporting does not provide any details about the sectors or geographic regions that the actor typically targets. Consequently, there is no publicly known information regarding whether the actor focuses on financial gain, espionage, disruption, or any other strategic objective. All statements about targeting or intent would be speculative and are therefore omitted.

No publicly accessible sources describe the malware families, initial access vectors, or tooling style associated with this actor. Without concrete evidence, any discussion of specific techniques or tools would be unfounded. No open-source information indicates the frequency, timing, or duration of any alleged activities attributed to this actor.

There is no publicly established link between the actor and any state sponsor, criminal consortium, or other affiliations. Claims of state nexus or consortium membership cannot be verified from available sources. Accordingly, the actor's affiliations are considered unknown based on current information.

No specific campaigns, operations, or notable incidents have been attributed to Bandidos or the Bandidos Revolution Team in open-source reports. The absence of documented activities prevents any description of representative examples or operational patterns. Therefore, the profile is limited to the confirmed aliases and the acknowledgment of missing data.

Incidents

Attributed incidents are available to members.