TTP Group
Attribution profile
- Type
- Activist
- Location
- Finland
- Known incidents
- 1 incident
- Sources
- 0 sources
- First seen
- 2023-09-23
- Last seen
- 2023-09-23
- Updated
- 2026-10-13 10:28
- Aliases
- 1 alias
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
TTP Group, a threat actor based in Finland, has been observed conducting distributed denial-of-service attacks against Finnish government services. In September 2023 the group targeted the Finnish Transport and Communications Agency (Traficom), overwhelming its electronic services and disrupting public access to vehicle registration and traffic permit applications; the agency responded with countermeasures to restore functionality, noting the incident as the second service outage within a month. The attack was intended to disrupt service availability. No data breach or permanent damage was reported. Publicly available information does not specify the actor’s malware families, initial access vectors, tooling beyond the DDoS method, nor any state or criminal affiliations.
Incidents
Attributed incidents are available to members.
1 incidentSources
Sources available to members: 0 sources.