Threat actor
LV Blog
Attribution profile
- Type
- Activist
- Location
- Italy
- Known incidents
- 1 incident
- Sources
- 1 source
- First seen
- 2022-11-19
- Last seen
- 2022-11-19
- Updated
- 2026-10-04 00:39
- Aliases
- 1 alias
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
LV Blog, a threat actor linked to Italy, is known for a November 2022 breach of a Mexican automotive company in which over 2 TB of personal and corporate data were exfiltrated and samples subsequently leaked. The attackers publicly blamed the victim for lacking antivirus software and for having exploitable network vulnerabilities that enabled unauthorized access, indicating that the initial intrusion relied on those network weaknesses. No malware families, tooling specifics, financial or espionage motives, or state or criminal affiliations are described in the available sources.
Incidents
Attributed incidents are available to members.
1 incidentSources
Sources available to members: 1 source.